[Spacewalk-list] Access log for Satellite Administrator?

[Nikos Zaharioudakis]

Hi Matthew,

If you know the admin username and you got a great history of your
/var/log/messages* you can grep at least like this

[root at spacewalk-host ~]# grep scv /var/log/messages*
May 31 14:52:37 spacewalk-host server: 2018-05-31 14:52:37,632
[ajp-bio-127.0.0.1-8009-exec-15] INFO
com.redhat.rhn.frontend.action.LoginAction - LOCAL AUTH SUCCESS: [sdv]
May 31 14:53:26 spacewalk-host server: 2018-05-31 14:53:26,344
[ajp-bio-127.0.0.1-8009-exec-12] INFO
com.redhat.rhn.frontend.action.LoginAction - LOCAL AUTH FAILURE:
[sdv_admin]

there are other places you may have some info as well
/var/log/cobbler/cobbler.log:Thu May 31 15:20:37 2018 - DEBUG | REMOTE
sdv authorization result: True; user(?)

/var/log/rhn/rhn_web_api.log:[2018-05-23 11:48:47,148] INFO  -
REQUESTED FROM: 10.13.10.25 CALL: auth.checkAuthToken(sdv,
62f5726a6b716f309985f294fdf86x3e221d7f82e1645a7e5e8f82cfa1d2fb)
CALLER: (none) TIME: 0.0 seconds


There might be other ways if this info is kept in the database as
well, but I am not aware
Nikos

########################################3
Zaharioudakis Nikos, RHC{A,DS,E,VA,X,I}, VCP(4,5},VCI, Mentor VCI,
Zimbra Instructor
https://www.redhat.com/rhtapps/verify/?certId=100-001-262
Public  Calendar :
https://www.google.com/calendar/embed?src=nzahar%40gmail.com&ctz=Europe/Athens
+30 694 720 40 63
http://zimbra.wikidot.com/zimbra-installations-in-greece


On 31 May 2018 at 23:25, Wilkinson, Matthew
<MatthewWilkinson at alliantenergy.com> wrote:
> Is there any way to generate a report to see if the default Satellite Administrator account has been accessed since Spacewalk was initially configured?
>
> Thanks!
>
> Matthew Wilkinson | Lead Server Administrator, Unix
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list