Email alert on password change

officecase · 01-18-2010, 07:50 PM

I wanted to know if anyone had an idea or has heard of creating an email alert when a user changes the password on a samba user?

I would like to be able to receive and alert if a user changes their samba password. Could anyone point me in the right direction? I will be attempting this on Arch Linux.

Thanks,

James

kenneho · 01-19-2010, 12:38 AM

Quote:

Originally Posted by officecase

I wanted to know if anyone had an idea or has heard of creating an email alert when a user changes the password on a samba user?

I would like to be able to receive and alert if a user changes their samba password. Could anyone point me in the right direction? I will be attempting this on Arch Linux.

Thanks,

James

I'm sure there are many ways you can occomplish this, but here is what we do: All our linux boxes have their syslog daemon set up to log to a central log host. On the log host we're running "swatch", which is a tool for real time monitoring of syslog message. Whenever the term "password changed for" (or whatever) is detected in syslog, we are notified by email.

You could of course have a cron job of something running on your individual servers that greps for this term, and sends you an email.

- kenneho

officecase · 01-20-2010, 11:54 AM

Quote:

Originally Posted by kenneho

I'm sure there are many ways you can occomplish this, but here is what we do: All our linux boxes have their syslog daemon set up to log to a central log host. On the log host we're running "swatch", which is a tool for real time monitoring of syslog message. Whenever the term "password changed for" (or whatever) is detected in syslog, we are notified by email.

You could of course have a cron job of something running on your individual servers that greps for this term, and sends you an email.

- kenneho

That is awesome! Thank you very much.