Dear Bogdan Enache, That's my pleasure to meet the orginal contributor of this facility. Thanks for your help, i'm successfully save my poweradmin log to a separated file. I'm very appreciate your help It's just one more problem had not been solved:
"Can you show me how to log what user do after logged in (such as change record, add zone ... more detail more great)" I mean: if user modify record: create/delete/change domain, zone, ip, all of these activity will be logged. Thanks you so much my friend ! ------------------------------ > > Message: 2 > Date: Mon, 21 Jan 2013 15:46:26 +0200 > From: Bogdan Enache <enachebog...@gmx.com> > To: pdns-users@mailman.powerdns.com > Subject: Re: [Pdns-users] [Help] - Audit the user login & what had > been edited in dns record > Message-ID: <50fd46b2.7050...@gmx.com> > Content-Type: text/plain; charset=UTF-8 > > Hi ??c, > I'm the original contributor to this facility. > > I think that support questions regarding PowerAdmin should be directed > to PowerAdmin site. > > And regarding your questions: full audit has not been implemented to > PowerAdmin (tracking modifications, deletions etc). > The original thread about the syslog implementation is here: > https://www.poweradmin.org/trac/ticket/431 > The purpose of the changes was to track and ban ip's that try to > brute-force hack their way into the web interface, using fail2ban. > > Sending the logs to another file (and not to /var/log/messages): make > sure you read a tutorial on how to redirect syslog facilities to another > files for your distribution. > For example, what you could try: > > config.inc.php: > |$syslog_facility = LOG_LOCAL5|; > > /etc/syslog.conf: > # Log pdns, pdns recursor > local5.* /var/log/poweradmin.log > > Have a nice day. > > Bogdan E. > > > Pe 21.01.2013 11:30, ??c Vinh H? a scris: > > > > Dear all, > > > > I have an dns server using PowerDNS and PowerAdmin-2.1.5 > > > > My system works great until one day, someone of my team logged in > > PowerAdmin GUI website and change some PDNS record (all member of my > > team had right to log-in & modify any record) So, that's the problem, > > i want to audit what username logged in & what they do after > > logged-in. I found that the latest version of poweradmin can help me > > to logging the success & fail log in. > > > > After some configuration & updating poweradmin version form 2.1.5 to > > 2.1.6, in my /var/log/messages start to log user authenticated of > > powerdns. > > > > For example: / > > / > > > > /Jan 21 11:45:19 localhost poweradmin: Successful authentication > > attempt from [x.x.x.x] for user 'XXX' > > / > > > > /Jan 21 11:45:44 localhost poweradmin: Failed authentication attempt > > from [x.x.x.x] for user 'YYY'/ > > > > / > > / > > > > So now, i want to save these information into a separate file (not in > > /var/log/messages) And can you show me how to log what user do after > > logged in (such as change record, add zone ... more detail more great) > > > > Thank you so much ! > > > > Vinh Ho > > > > > > > > _______________________________________________ > > Pdns-users mailing list > > Pdns-users@mailman.powerdns.com > > http://mailman.powerdns.com/mailman/listinfo/pdns-users > > > >
_______________________________________________ Pdns-users mailing list Pdns-users@mailman.powerdns.com http://mailman.powerdns.com/mailman/listinfo/pdns-users
