LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-18-2010, 07:50 PM   #1
officecase
Member
 
Registered: Jan 2007
Distribution: Centos, ArchLinux
Posts: 40

Rep: Reputation: 18
Email alert on password change


I wanted to know if anyone had an idea or has heard of creating an email alert when a user changes the password on a samba user?

I would like to be able to receive and alert if a user changes their samba password. Could anyone point me in the right direction? I will be attempting this on Arch Linux.

Thanks,

James
 
Old 01-19-2010, 12:38 AM   #2
kenneho
Member
 
Registered: May 2003
Location: Oslo, Norway
Distribution: Ubuntu, Red Hat Enterprise Linux
Posts: 657

Rep: Reputation: 40
Quote:
Originally Posted by officecase View Post
I wanted to know if anyone had an idea or has heard of creating an email alert when a user changes the password on a samba user?

I would like to be able to receive and alert if a user changes their samba password. Could anyone point me in the right direction? I will be attempting this on Arch Linux.

Thanks,

James
I'm sure there are many ways you can occomplish this, but here is what we do: All our linux boxes have their syslog daemon set up to log to a central log host. On the log host we're running "swatch", which is a tool for real time monitoring of syslog message. Whenever the term "password changed for" (or whatever) is detected in syslog, we are notified by email.

You could of course have a cron job of something running on your individual servers that greps for this term, and sends you an email.


- kenneho
 
Old 01-20-2010, 11:54 AM   #3
officecase
Member
 
Registered: Jan 2007
Distribution: Centos, ArchLinux
Posts: 40

Original Poster
Rep: Reputation: 18
Quote:
Originally Posted by kenneho View Post
I'm sure there are many ways you can occomplish this, but here is what we do: All our linux boxes have their syslog daemon set up to log to a central log host. On the log host we're running "swatch", which is a tool for real time monitoring of syslog message. Whenever the term "password changed for" (or whatever) is detected in syslog, we are notified by email.

You could of course have a cron job of something running on your individual servers that greps for this term, and sends you an email.


- kenneho
That is awesome! Thank you very much.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Alert when email comes but without downloading contents Ulysses_ Linux - Security 7 09-05-2009 11:55 AM
mdadm email alert template oddo Linux - Software 0 11-01-2008 12:26 PM
No email alert from Nagios packets Linux - Software 0 10-18-2005 11:56 AM
Email Alert bad_andy Slackware 3 07-07-2005 09:45 PM
Alert user password change ust Linux - Software 1 09-08-2003 05:09 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:53 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration