Security Basics: Re: Monitoring the change of password in Unix

[asai ajith <asaiajithin () yahoo co in>]

You can move the move the history to remote logging server and use filters and search.

Regards,
Ajith



----- Original Message ----
From: Jason Mitchell <jm () hcn com au>
To: wilson () email chop edu; security-basics () securityfocus com
Sent: Thursday, 22 January, 2009 2:56:27 AM
Subject: RE: Monitoring the change of password in Unix

pam has the ability to do so, and does so by default on most linux boxes.
What version of Unix are you talking about specifically? 

The following is from /var/log/secure on a RHEL box:

Jan 22 08:23:49 www passwd: pam_unix(passwd:chauthtok): password changed for
jm

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
Behalf Of wilson () email chop edu
Sent: Wednesday, 21 January 2009 3:03 PM
To: security-basics () securityfocus com
Subject: Monitoring the change of password in Unix

Is there a way in Unix, without extra software, to monitor the use of the
"passwrd" command to reset the password?  Perferably something that sent the
event to Syslog.


      Did you know? You can CHAT without downloading messenger. Go to http://in.webmessenger.yahoo.com/