Security Basics mailing list archives

Re: open source user audit software ??


From: Rodrigo Blanco <rodrigo.blanco.r () gmail com>
Date: Fri, 5 Aug 2005 03:05:48 -0600

Perhaps you could take a look at:

http://www.evidian.com/security/index.htm

This product does exactly what you are looking for. It has several
modules, so there is one for provisioning user accounts (Active
Directory, Linux, and many other target systems), one to make
workflows that will automate the provisioning processes and allow
approval sequences before deploying new users, etc. Also native SSO is
supported for all kinds of applications.

Best regards,
Rodrigo.

On 8/3/05, Michael Gale <michael.gale () bluesuperman com> wrote:

Thanks for the links but I believe that IBM's software has the ability
to create accounts in Active Directory as well as on Linux machines ?

I am not 100% sure on that ... ideally we would like the following:

1. A new employee is starting
2. The PM for the new employee goes to our intra net site and fills out
a form requesting access for mail and lets say an account on our Linux
CVS server.
3. The request goes to IT
4. If the request is approved then the account is setup in AD and on the
Linux box automatically.

I was told that the IBM software does something to that affect ??

Michael



NewYork User wrote:
Michael,

I think you are looking to implement "Single Sign-on (SSO) Solution".
IBM has 2 products Tivoli Identity Manager (TIM) and Tivoli Access
Manager (TAM). If you are looking to implement Open Source Web SSO,
SUN has recently donated the code to open source community. Take a
look at the following sites.

http://www.internetnews.com/dev-news/article.php/3519651

https://opensso.dev.java.net/




On 7/29/05, Michael Gale <michael.gale () bluesuperman com> wrote:

Hello,

I believe that IBM has a product called Tivoli which has a component
that can do the following:

- A new employee is starting, the PM clicks the required access through
a web portal. Which then notifies each person required to make the
changes or accounts, plus could make the accounts if allowed.

It will provide an audit trail of who requested the access and who
approved the request.

It can also provide an alert when new accounts have been created with
out using the software.

Does anyone know of any open source tools that can do this ??

Michael




Current thread: