Novell Advanced Audit Service

These notes describe the fixes, enhancements, and the issues that exist for the NetWare^® 6 SP1 release of the Novell^® Advanced Audit Service (NAAS).

NDS Auditing

Four new events have been added for NDS^® Auditing:

• DSE CHANGE ACL is generated when Trustee information of an object is changed
• DSE ENABLE LOGIN is generated when user account is enabled
• DSE DISABLE LOGIN is generated when user account is disabled
• DSE DETECT INTRUDER is generated when an user account is disabled because of intruder detection

NAAS in Diverse NetWare Environment

For smooth functioning of NAAS in a mixed NetWare environment comprising NetWare 6 and NetWare 6 Support Pack 1 servers, the existing NAAS framework must be reconfigured. Reconfigure NAAS using the snap-ins that ship with the support pack.

Reconfiguring the NAAS framework upgrades all existing event templates and policies in the partition created for eDirectory^TM auditing and preserves the existing policy association. If no policies are found under the NAAS container, templates and policies will be created.

For details on configuring NAAS, see Configuring the NAAS Framework in the Novell Advanced Audit Service Administration Guide. Be sure to restart the NetWare 6 Support Pack 1 servers after reconfiguring NAAS .

HINT:  To refresh templates and policies, restart ConsoleOne after reconfiguring NAAS.

Only the administrator can reconfigure the existing NAAS configurations using the NAAS default configuration utility.

Audit Report Generation

When generating reports in some foreign language environments with Oracle* as the NAAS database, some character sets might not be clear.

To resolve this problem, complete the following at the database server.

IMPORTANT:  Before proceeding, make sure to back up the database.

1. If the database is running, stop it using ORASTOP and ORAUNLD at the system console.

2. Start the database by using ORALOAD and ORASTART at the system console.

3. Enter SVRMGR31 at system console.

4. Enter SYSTEM and enter the password. By default, the password is manager.

5. Execute the following SQL commands:

   SQL> ALTER SYSTEM ENABLE RESTRICTED SESSION;

   SQL> ALTER SYSTEM SET JOB_QUEUE_PROCESSES=0;

   SQL> ALTER DATABASE OPEN;

   SQL> ALTER DATABASE CHARACTER SET UTF8;

   SQL> SHUTDOWN;

   SQL> STARTUP MOUNT;