On Thu, 2009-03-05 at 10:08 -0600, LC Bruzenak wrote:
All,
I was thinking about a scheme to retrieve usernames from UIDs on
different machines. I was going to push the passwd file from a
participating audit client up to the server. Then I'll store it uniquely
according to its IP address (e.g. /var/etc/passwd.192.168.10.10).
...
Forgot to add - one alternative is to replace the UIDs in the events
with the usernames, but I thought that one might be a bigger impact to
the code base.
LCB.
--
LC (Lenny) Bruzenak
lenny(a)magitekltd.com