[rancid] Re: Who made changes?

[john heasley]

Wed, Apr 01, 2009 at 10:33:23AM +0400, Smirnoff Alexander:
> I am think about AAA for this question, and may be anybody have working
> scheme of this correlation?

AAA command accounting logs the commands the user enters and the AAA server
can save those with the username and a timestamp.  those logs can be
correlated with rancid diffs by the timestamp (cvs diff -D), though
multiple changes may occur between diffs and only the end result will be
caught.

It'd seem that command accounting alone, or just exec start/stop accounting,
would be sufficient to point fingers.

> -----Original Message-----
> From: rancid-discuss-bounces at shrubbery.net
> [mailto:rancid-discuss-bounces at shrubbery.net] On Behalf Of john heasley
> Sent: Tuesday, March 31, 2009 10:13 PM
> To: Paul Buts
> Cc: rancid-discuss at shrubbery.net
> Subject: [rancid] Re: Who made changes?
> 
> Tue, Mar 31, 2009 at 07:16:43PM +0200, Paul Buts:
> > Hi all,
> > 
> > I installed Rancid in combination with FreeBSD CVSWeb on a Debian
> server.
> > Everything is working, great!
> > 
> > There is only one thing I want to know: is it possible to show who
> made the
> > changes in telnet? At this moment the webpage is telling me that the
> unix
> > user (who runned Rancid) has made the changes. For example, I have
> more
> > telnet accounts. One for Paul and one for Peter. If Paul made one
> change,
> > and Peter made two changes, I want that the webpage is telling me
> exactly
> > who made a change.
> 
> correlated changes to AAA command accounting records, the only reliable
> way.
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss