Logging of administrator action & changes

UCS - Univention Corporate Server
1

Hi,

after installing and configuring the UCS, our clients receive a documentation which contains, among other information, the password for the administrator.

Unfortunately some of our clients like to play around with the UCS, espacailly with the samba and user configuration.

In the future we will set up a separate account with administrative rights for the customers, but this doesn’t solve the real problem:

How can we monitor which detail in the configuration the client has changed? There is some information in /var/log/univention/listener.log, but that is not detailed enough.

Any suggestions or is might this be a feature requests?

Thanks for any comments,

Stefan

2

Hi,

besides of the /root/.bash_history we have a log of changes at the ucr variables. Look at /var/log/univention/config-registry.replog

Other logs tracking user actions are not enabled.

/CV

3

You can also log modifications in LDAP, have a look at the directory logger documentation.

There is also the possibility to use the auditd package

4

GREAT!
Thank you both for the suggestions!

Stefan