DEGROOT@rcl.wau.nl ("Kees de Groot, Information Systems Security") (10/03/90)
I post the following on behalf of a colleague: Subject: Information derived from SYSUAF I am in an almost desperate search for tools, utilities, examples, anything to derive information from the User Authorization File in various combinations (users versus their UAF-user-record-fields), instead of the standard output provided by Authorize Utility commands like: list/full or list/brief. Combination examples: - All (or selection of) users with CMKRNL privilege - Users versus privileges and their pwdminimum - Users versus LGICMD and Login Flag "Captive" - All users with identifier "xxxxxxx" - Users with Network Access versus their Proxies - etc. etc. etc. (all combinations you can come up with...) I know there are ways with System Services as $GETUAI or with DATATRIEVE but the fact is that I am not a programmer and moreover I haven't got the time to explore right now. So what I need is a well tested, reliable solution capable of running under VMS 5.2. If you have anything for me meeting the above description then please help me out! Thanks for your cooperation anyway. Kees Noppen INTERPHARM BV Holland Please use DEGROOT@HWALHW50 or degroot@rcl.wau.nl to contact me, because I am not on the net.
PLK@nccibm1.BITNET (10/23/90)
Please take a look at THE SECURITY TOOLKIT by Cubic Systems PTY, LTD distributed by Clyde Digital. The tool has been purchased by us for auditing of our local and remote sites. Initial use of the product has been very productive.
davo@homer.corp.sgi.com (Dave Ferrise) (10/25/90)
I have taken a look at a few 3rd party offerings that do this (among other things) most notably SECUREPAK from DEMAX (was DEMAC) and will soon be looking at SECURITY TOOLKIT from Clyde Digital. Coopers & Lybrand evaluated several and posted their results recommending Security Toolkit. There are probably some utilities on the DECUS tapes, also. - davo - davo@homer.corp.sgi.com Dave Ferrise