Problem with auditing

From: Chris Newman <cjnewman_at_uiuc.edu>
Date: Sun, 26 Aug 2007 21:58:49 -0500 (CDT)
Message-Id: <20070826215849.ATL12462@expms6.cites.uiuc.edu>

Hello,

10.2.0.3 here on a windows box for testing. I've turned on auditing, but nothing is showing up in the sys.aud$ table. Below are my audit settings:

NAME                                 TYPE        VALUE


------------------------------------ ----------- ------------------------------

audit_file_dest                      string      C:\ORACLE\PRODUCT\10.2.0\ADMIN
                                                         \ORCL\ADUMP
audit_sys_operations                 boolean     FALSE
audit_trail                          string      DB_EXTENDED

I'm looking to set up auditing for a user for their 'CREATE' statements - database wide. I don't care about success or failure, I want to see them all. So I do something like this:

audit CREATE ANY TABLE by VPD_CLERK1;
audit CREATE TABLE by VPD_CLERK1;

I get 'audit succeeded'. And I verify this by checking the DBA_PRIV_AUDIT_OPTS. It's my understanding that 'BY ACCESS' means whether they succeed or not.

USER_NAME                      PRIVILEGE


------------------------------ ----------------------------------------

SUCCESS FAILURE
---------- ----------

VPD_CLERK1                     CREATE TABLE

BY ACCESS BY ACCESS

VPD_CLERK1                     CREATE ANY TABLE

BY ACCESS BY ACCESS Next I login as the user, and attempt to create a table:

connect VPD_CLERK1/test;

create table blah(name number);
Table created.

I then log back in as sys, query sys.aud$ and I get nothing :(

SQL> select count(*) from sys.aud$;

COUNT(*)

1 row selected.

Any thoughts on this? I've tried numerous permeations with a variety of users and I get the same thing. The actual sys.aud$ is working, because if I audit create session it populates.

Thanks- Chris
--

http://www.freelists.org/webpage/oracle-l Received on Sun Aug 26 2007 - 21:58:49 CDT