DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;
  h=X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Message-ID;
  b=go9qjxPkurRxd1y3F3TEUlrSXikPc2hXjQqAoO7Yzt2E4iB+GLkb9aU6mxF2fPVD10BUqEJMwOV5GtTcjVtDxaNSMnfNHi9Kj7yZu71OBan8v8Y7E9tcJriOszXYLXyo73wW4hxO/Ux2I0vl0JwgcdCtDw47QL3qCxBgyidypSg=;
Date: Sun, 16 Mar 2008 16:09:45 -0700 (PDT)
From: Mary Elizabeth McNeely <mary_mcneely@yahoo.com>
Subject: Re: Audit for program at login time
To: oracle-l@freelists.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-ID: <82345.91933.qm@web54112.mail.re2.yahoo.com>
Sender: oracle-l-bounce@freelists.org
Errors-to: oracle-l-bounce@freelists.org
Precedence: normal
Reply-to: mary_mcneely@yahoo.com

Thanks for all the responses.  It looks like I'll have to use a trigger after all ...


Adar - yes, duly noted about autonomous transaction in a trigger

Jared - sad but true, the program can be spoofed - risk is understood and accepted 

Brandon - thanks for putting together an initial cut at an answer, wow!  I too was surprised calling program wasn't included in the audit stream; in fact, I was so sure it was included, I didn't even bother checking before enabling auditing (oops).  


Mary Elizabeth

----- Original Message ----
From: Yechiel Adar <adar666@inter.net.il>
Cc: oracle-l@freelists.org
Sent: Sunday, March 16, 2008 7:56:50 AM
Subject: Re: Audit for program at login time

If you use login trigger to insert the values into your table,
do not forget to use: pragma autonomous transaction.

Adar Yechiel
Rechovot, Israel


Mary Elizabeth McNeely wrote:
> Hello all,
>
> I am tasked with auditing who accesses the database with what program (equivalent of v$session.program) upon database login.  I can get everything I want into the audit trail by using "audit connect", except the equivalent of v$session.program.
>
> (a) Does anyone know of a supported way to push the program information into sys.aud$, and if not,
>
> (b) Does anyone know of a way to accomplish this other than a login trigger?  Any sample code available?
>
> Thanks in advance for any hints you can offer.
>
> Mary Elizabeth McNeely
> --
> http://www.freelists.org/webpage/oracle-l
>
>
>
>  
--
http://www.freelists.org/webpage/oracle-l
--
http://www.freelists.org/webpage/oracle-l