[misc.security] Information derived from SYSUAF

DEGROOT@rcl.wau.nl ("Kees de Groot, Information Systems Security") (10/03/90)

I post the following on behalf of a colleague:

Subject: Information derived from SYSUAF

I am in an almost desperate search for tools, utilities,
examples, anything to derive information from the User
Authorization File in various combinations (users versus their
UAF-user-record-fields), instead of the standard output provided
by Authorize Utility commands like: list/full or list/brief.

Combination examples:
        - All (or selection of) users with CMKRNL privilege
        - Users versus privileges and their pwdminimum
        - Users versus LGICMD and Login Flag "Captive"
        - All users with identifier "xxxxxxx"
        - Users with Network Access versus their Proxies
        - etc. etc. etc. (all combinations you can come up
          with...)

I know there are ways with System Services as $GETUAI or with
DATATRIEVE but the fact is that I am not a programmer and
moreover I haven't got the time to explore right now.
So what I need is a well tested, reliable solution capable of
running under VMS 5.2.

If you have anything for me meeting the above description then
please help me out!
Thanks for your cooperation anyway.

Kees Noppen
INTERPHARM BV
Holland

Please use DEGROOT@HWALHW50 or degroot@rcl.wau.nl to contact me,
because I am not on the net.

PLK@nccibm1.BITNET (10/23/90)

Please take a look at THE SECURITY TOOLKIT by Cubic Systems PTY, LTD
distributed by Clyde Digital.  The tool has been purchased by us
for auditing of our local and remote sites.  Initial use of the
product has been very productive.

davo@homer.corp.sgi.com (Dave Ferrise) (10/25/90)

	I have taken a look at a few 3rd party offerings that do this (among
other things) most notably SECUREPAK from DEMAX (was DEMAC) and will soon be
looking at SECURITY TOOLKIT from Clyde Digital.  Coopers & Lybrand evaluated
several and posted their results recommending Security Toolkit.  There are
probably some utilities on the DECUS tapes, also.

					- davo -

davo@homer.corp.sgi.com			Dave Ferrise