Skip to content
This repository has been archived by the owner on Feb 28, 2024. It is now read-only.

How to log user commands into server accounting file? #192

Open
shahriarbasiri opened this issue Jan 3, 2023 · 0 comments
Open

How to log user commands into server accounting file? #192

shahriarbasiri opened this issue Jan 3, 2023 · 0 comments

Comments

@shahriarbasiri
Copy link

I was working with a NOS which uses pam_tacplus for tacacs and I found that it logs user commands to server ( /var/log/tac_plus.acct) but when I config ssh pam files the same as the NOS on other devices, it doesn't log any user commands to server.
Firstly, I was thinking that if I config the session part in pam to use tacplus.so then I'll have the accounting, but apparently that is not the case. I also checked the pam_sm_open_session and I found that no "cmd" input is passed to _pam_account().
So, my next question is how a user application should send log of user commands to server? Apparently there is no standard API for that and the user should manually call the _pam_account() ?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant