| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Re:RE: Auditing logons
Dennis,
According to damanagement:
____________________Reply Separator____________________ Author: DENNIS WILLIAMS <DWILLIAMS_at_LIFETOUCH.COM> Date: 8/9/2002 9:13 AM
Dick
Four ideas for you:
1. Change the password on the schema account. Restrict who has it, threaten
those.
2. If the changes happen often, you can use LogMiner to search for more
details, like the specific time of change.
3. Excellent reason to force all non-PeopleTools usage to another userid.
4. Tell management "I'll find them if you'll skin 'em."
You've just made me feel better about restricting who has the schema
password for our ERP system.
Dennis Williams
DBA
Lifetouch, Inc.
dwilliams_at_lifetouch.com
-----Original Message-----
Sent: Friday, August 09, 2002 11:49 AM
To: Multiple recipients of list ORACLE-L
Folks,
Before I go off re-inventing the wheel once again I'll ask the group is
anyone has tried this before. What I have is a request from damanagement to
tell them when someone connects to our PeopleSoft database using the schema
username, but outside of PeopleTools. The reason is that there have been
some
"unexplained" changes to data that have occurred over the last month that is
causing a pile of concern. It is believed that someone who has the schema
password is using SQL*Plus or Toad to update the data when they should not
be
doing so. Now auditing connects for the schema account is not a problem,
but
determining which are suspicious and which are due to the damned PeopleSoft
panel processor I can't see a way around easily from sys.aud$. Anyone else
been
there, done that??
Dick Goulet
--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author:
INET: dgoulet_at_vicr.com
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists --------------------------------------------------------------------To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists --------------------------------------------------------------------To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists --------------------------------------------------------------------To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Fri Aug 09 2002 - 13:33:38 CDT
 |
 |