[Infrastructures] Change Audit Trail

Wesley Craig wes@umich.edu
Thu, 1 Sep 2005 22:06:41 -0400


On 27 Aug 2005, at 14:14, Kyle Moore wrote:
> The only thing I can think of is to use Tripwire in addition to one  
> of these tools to track the changes.

radmind *is* a tripwire.  Changes are made by detecting differences  
between the known good state and the state of a system.  You can  
further detect whether this change is a planned change, being pushed  
by an admin, or an "unplanned" change to the local configuration.   
Because of this distinction between planned and unplanned changes, it  
is possible to implement lightweight procedures on the radmind server  
to gate all changes.  This gate can serve as review, acceptance  
testing, audit, etc.

:wes