How to capture windows user login in Unix

[sightless]

Hi all,
Is it possible to capture Windows user login in Unix? We have a AIX Unix system that allows users to login (using a common login) and run scripts. At the end of the day, we cannot find out which user executed the script. Is it possible in Unix to find out the windows login user id for the user logged in Unix using a common login.

Appreciate any suggestions.

AK

[sicarie]

The user logins and escalations should be kept in various /var/log files (I can't remember the specific ones AIX uses.

It should be a matter of ensuring your logging levels are high enough to capture the information you're looking for without overloading your storage, and then finding the right logs to match the user login with the command execution.

What are you using for logging right now?

[sightless]

Hi,
Sorry for late reply; I was on leave.

To log in to unix, the user currently uses a common login profile to process some data by running shell scripts. There are options available to the user, he just select an option to run. Currently, there is no specific user profile for each user logs in the system. Once logged in, I can only capture the unix login, which is a common login. I lose trace of who runs what.

I am just wondering if there a way to allow my unix capture the windows login.

Thanks.
AK

[sicarie]

I would HIGHLY recommend using separate Linux shell accounts and setting up something like LDAP to manage MS ActiveDirectory to Linux logins, however that's a suggestion.

How do the users connect? If it's via ssh then there's a log of what IP the user came in with at a specific time. Find the time the script was started, find the IP of the user who kicked it off, and check your network diagrams.

[sightless]

Hi,

Yes, it is a good suggestion. I will try that, but I am not sure how far I may go with it. But I will give it a try.

Thanks a lot.