Xymon Mailing List Archive search

monitoring etc passwd

list Ralph Mitchell
Wed, 8 Jul 2009 11:20:31 -0500
Message-Id: <user-b2041e2e5c15@xymon.invalid>

Only if passwords are actually stored in /etc/passwd.  Linux systems have
been using /etc/shadow to store passwords, along with last change time and
some other things, leaving just the uid, gid, home directory and shell in
/etc/passwd.
Ralph Mitchell


On Wed, Jul 8, 2009 at 5:34 AM, Shaun Phillips <
user-176e7038266c@xymon.invalid> wrote:
If you do monthly root password changes this is going to send your entire
estate red surely as the MD5 will change?


On Wed, Jul 8, 2009 at 9:02 AM, dOCtoR MADneSs <user-d54077869176@xymon.invalid>wrote:
user-cf452ff334e0@xymon.invalid a écrit :

Gavin,
Use the FILE client check to determine and possibly alert when a file
(/etc/passwd) has been changed.

---- Gavin Leonard <user-d65663809eb4@xymon.invalid> wrote:
Hi All,
               I am having a problem where users and groups are being
created without the knowledge of the admin team and its making it difficult
to know who had access to what systems if they leave the company... is there
a way for hobbit to tell me when the /etc/passwd or /etc/group files change?
Thanks in Advance..

-Gavin

Hi,
In client-local.cfg :
[your_host]
file:/etc/passwd
in hobbit-clients.cfg :
HOST=your_host
FILE /etc/passwd red MD5=9780JNLKNoiulknaée2

Those settings should do exactly what you need