This post is at: ForumFeatures Wanted
5 posts / 0 new
Last post
dbenders
dbenders's picture
Joined: 2007/10/25
Points: 0

Hi, is there a plan to save in a log what change make each admin?

In MTE we want to track any change made by any one so we can track misconfiguration maded by some admins.

All the systems I know, have some kind of this, for example in linux the bash history.
Maybe a webmin log tracker?

eeman
eeman's picture
Joined: 2007/11/06
Points: 260

I believe something like that is being worked on. I assume that you're doing the due diligence of not letting multiple people login with the same username. Webmin has some abilities for this, but the module has to send data to the logging module.

Erik Smith
dCAP
Thirdlane/Asterisk Support available
esmith.bgnv@gmail.com

dbenders
dbenders's picture
Joined: 2007/10/25
Points: 0

Hi Erik, we have each admin with their own login and password, but the problem is that there is no track on what they did. For example, if someone change an extension name, we only know that he acceced the extension modification CGI, but there is no track of what was changed.

Do you know what is the time frame for this feature?

Daniel Bendersky
Netline Telecomunicaciones S.A.
www.netline.net

eeman
eeman's picture
Joined: 2007/11/06
Points: 260

you mean you want a full diff -u of the file changes on every save? I doubt you'll get anything quite that elaborate, that doesn't scale very well for 10000 users plus admins.

Erik Smith
dCAP
Thirdlane/Asterisk Support available
esmith.bgnv@gmail.com

dbenders
dbenders's picture
Joined: 2007/10/25
Points: 0

Hi, I agree that if you use diff - u, will not scale very well, but instead I will sugest to save a LOG with at leat this info:

DATE

TIME

LOGIN USER

CGI Excecuted

PARAMETERS ENTERED IN THE SCRIPT

With this info, will be OK in order to track how did what. You don't need to know exactly what characters were modified in an asterisk configuration, but you will want to know, when someone delete an extension by mistake, to know which extension was deleted in order to reverse it. Also to train that user how to do things.

Daniel Bendersky
Netline Telecomunicaciones S.A.
www.netline.net