Audit and Assurance

Expand all | Collapse all

How To Get User Listing from A Database Audit

  • 1.  How To Get User Listing from A Database Audit

    Posted 05 Feb, 2019 15:16
    ​Hello,

    Can you someone please advice how to get user listings from an Oracle Data using active directory?

    Thank you.

    ------------------------------
    Sam Kapologwe, MSM, MBA , CISA.
    Information Security
    ------------------------------


  • 2.  RE: How To Get User Listing from A Database Audit

    Online Forum Topic Leader
    Posted 05 Feb, 2019 15:21
    @,

    Can you provide some more detail please?  Do you want the database users from an Oracle database that is linked to active directory or some sort of single sign-on?​

    Best Regards,

    Ian

    ------------------------------
    Ian Cooke
    Audit & Assurance Topic Leader
    ISACA Journal Columnist
    ------------------------------



  • 3.  RE: How To Get User Listing from A Database Audit

    Posted 06 Feb, 2019 07:28
    Edited by Michael Hiett 06 Feb, 2019 07:28

    We have struggled with the same issues here. Some of our brightest have found a way to do what you are asking. Please visit our GitHub site https://github.com/azauditor/OracleAudit

    I hope that helps.

    Michael



    ------------------------------
    Michael Hiett
    IT Auditor
    ------------------------------



  • 4.  RE: How To Get User Listing from A Database Audit

    Online Forum Topic Leader
    Posted 11 Feb, 2019 01:52
    Thank you for the post.    For Active Directory audit, please find out what Active Directory Organizational Unit groups are established for Oracle user accounts.
    Also Oracle uses Database Schema model for Database Security keep that in mine.   I suggest meeting with the DBA and inquiring on how the Oracle Database access maps back to the Active Directory security groups (Organizational Units).   Do a walkthrough and get some print outs of sample access for priviliged user account and standard employee user group

    ------------------------------
    Sal Rodriguez
    CISA, CIA, CRMA, CCSA, CGAP, CICA, MBA, MS
    ------------------------------