Novell OPEN ENTERPRISE SERVER 2 SP2 - PLANING AND IMPLEMENTATION GUIDE 11-10-2009 Implementation Manual

Also see for OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION: Manual Manual Manual Installation guide

Contents

Novell OPEN ENTERPRISE SERVER 2 SP2 - PLANING AND IMPLEMENTATION GUIDE 11-10-2009 Implementation Manual Manual pdf 275 page image

System User and Group Management in OES 2 SP2 275novdocx (en) 22 June 2009I.8 Auditing System UsersIt is the nature of the Linux operating system and the POSIX security model that the root user hasaccess to all system information stored on the local server. Due to this fact, some organizationschoose to monitor the activities of privileged users.If you are interested in monitoring such activities, two Novell products can assist you. Novell Sentinel: Universal Password events can be monitored using Novell Sentinel. Youenable this by modifying the NMAS Login Policy Object. For instructions, see AuditingNMAS Events (http://www.novell.com/documentation/nmas33/admin/data/bwmt40o.html).Then refer to the Novell Sentinel Documentation (http://www.novell.com/documentation/sentinel6/) for further instructions. Privileged User Manager: This product lets you monitor root user activities on the OESserver by collecting data, analyzing keystrokes, and creating indelible audit trailes. For moreinformation, see the Novell Privileged User Manager Documentation (http://www.novell.com/documentation/privilegedusermanager22/index.html).www ApacheTomcatQuickFinderApache (wwwrun) and tomcat (novlwww) use thegroup ID (gid) of this group to run.QuickFinder requires that all users who manage theservice (including the eDirectory Admin user) belongto this group.User novlxsrvd is in the group because it needsaccess to an Apache domain socket.When NSS is installed on the Linux server, this groupis removed from the local system and created ineDirectory. This is required because members of thisgroup must have access to NSS data, and all NSSaccess is controlled through eDirectory.System User or Group Name Associated Service Purpose