A-33
Chapter 1 Network Administration
Model 5399 Remote Access Concentrator Network Administrator’s Guide for UNIX
Book A
Logging User and 5399 RAC Events
The 5399 RAC provides two mechanisms for logging events: host-based
security and a 4.3BSD-style syslog daemon (see Using 5399 RAC
Security on page A-397 for details on host-based security and ACP).
Host-based Security Logging
Host-based security provides logging capabilities that maintain audit
trails of user activity. The security server logs each event as a message to
its ACP log file. Security logging is enabled automatically when
host-based security is enabled for an 5399 RAC (using the parameter
enable_security).
Events are logged to the security server that responded to the security
request, either granting or denying access requests. When using back-up
security servers, the ACP log file is located on each server.
To change the name and/or format of theACP log file, see Modifying the
Supplied Security Application on page A-528.