pom_audit_manager

Allows a site to configure a list of users for whom failed authentication attempts must be logged and provides the ability to later extract that information for analysis. Syntax pom_audit_manager [-u=user-id {-p=password | -pf=password-file} -g=group] [-install ] [-report [-before]] [-purge [-before]] [-auditable] [-set event-name user-name ON|OFF ] [-delete event-name user-name] [-h] Arguments -u Specifies the user ID. This is a user with Teamcenter administration privileges. Note If Security Services single sign-on (SSO) is enabled for your server, the -u and -p arguments are authenticated externally through SSO rather than being authenticated against the Teamcenter database. If you do not supply these arguments, the utility attempts to join an existing SSO session. If no session is found, you are prompted to enter a user ID and password. -p Specifies the password. This argument is mutually exclusive with the -pf argument. -pf Specifies the password file. For more information about managing password files, see Manage password files. This argument is mutually exclusive with the -p argument. -g Specifies the group associated with the user. If used without a value, the user's default group is assumed. -install Installs audit functionality. -report [-before] Shows audit reports. Optionally, you can use the -before argument to show only those records before the specified date. The -before argument must be followed by an 8 digits ISO date such as 20071225 for Christmas day 2007. -purge [-before] Permanently removes event records from the user access logging list. Optionally, you can use the -before argument to filter purging to only those records before the specified date. The -before argument must be followed by an 8 digits ISO date such as 20071225 for Christmas day 2007. -auditable Shows which events are auditable. Currently POM_AUDIT_purge_audit, POM_AUDIT_bad_password_login, POM_AUDIT_bad_password_check, POM_AUDIT_change_password events are auditable. -set event-name user-name ON|OFF Adds or removes audit functionality on an event. -delete event-name user-name Deletes audit logs for specific events and users. You can specify the ALL value for either event-name or user-name. Currently POM_AUDIT_purge_audit, POM_AUDIT_bad_password_login, POM_AUDIT_bad_password_check, POM_AUDIT_change_password events are auditable. -h Displays help for this utility. Environment Standard runtime environment only. Files None. Restrictions None. Examples To see audit reports before a particular date: Copy pom_audit_manager -u=admin -p=admin -g=dba -report -before 20071201 To add audit functionality on an event: Copy pom_audit_manager -u=admin -p=admin -g=dba -set POM_AUDIT_bad_password_login ON Related Topics Audit Logs Management