The resource the user requested.
A three‑character code indicating whether this is a logging (LOG), violation (VIO), or trace (TRC) record. Violation records are highlighted with an asterisk (*) before the field.
The name of the resource rule set that validated the request.
The requester’s user identification string.
The logical input source where the access request was made.
The name of the CPU that validated the resource request.
The reason why the logging occurred. Valid entries are:
NO‑REC
CA ACF2 for z/VM found no record matching the rulekey in the CA ACF2 for z/VM Rule database
NO‑RULE
CA ACF2 for z/VM found no rule matching the environment of the request
RULE
CA ACF2 for z/VM found a resource rule that determined the access or prevention.
The exits and conditions that affected the validation. This field details:
NON‑CNCL
The requesting logonid was noncancelable. CA ACF2 for z/VM allowed the request.
The requesting logonid was a security officer. CA ACF2 for z/VM allowed the request.
CA ACF2 for z/VM unconditionally aborted the request.
CA ACF2 for z/VM modified the resource name to perform its database lookup operations. This field indicates what resource validation component modified the key.
The type of service request. Possible values are:
READ
The access request was for read only
ADD
The access request was to add new records to an existing file
DEL
The access request was to delete existing records
UPDT
The access request was to modify existing records.
The date (in julian and gregorian formats) the access request was made.
The time the access request was made.
The VM user ID of the virtual machine where the user was logged on or attempted the access. For logons of group machines, this is the group ID. For AUTOLOG commands, this is the machine to be autologged. For DIAL commands, this is the machine specified by the DIAL command. JOBMASK selects on this field.
The logonid of the user who attempted the action. For logons of group machines, this is the group user. For autologs, this is the user ID of the machine that issued the AUTOLOG command. For DIAL, this is the logonid entered to identify the user. MASK selects on this field.
The user’s name associated with the logonid.
The return code from the prevalidation exit. CA ACF2 for z/VM does not have a resource prevalidation exit. We provide this field in case you run OS/390 SMF data into the ACFRPTRV report program.
Continue normal processing
4
Logonid not found
8
Allow and log the request
12
Allow the request and reverify the password
Allow but log the request and reverify the password
20
Prevent the request.
The return code from the CA ACF2 for z/VM resource record manager. Possible return codes are:
The return code from the resource rule interpreter. Possible values are listed below.
0
Allow the request
4
Allow, but log the request
Allow the request and reverify the password
12
Allow the access, log the request, and reverify the password
16
Prevent the access
20
No rule applies
24
Rule record is not in proper format
28
Resource record was not found in the resident cache.
The return code from the postvalidation exit. CA ACF2 for z/VM does not have a resource postvalidation exit. We provide this field in case you run OS/390 SMF data into the ACFRPTRV report program.
Possible return codes are listed below.
Continue normal processing
Allow the request
Allow and log the request
12
Allow the request and reverify the password
16
Allow but log the request and reverify the password
20
Prevent the request
The final return code from the CA ACF2 for z/VM resource validation function. Possible values are listed below.
Allow the access
Allow but log the access
Allow the access and reverify the password
12
Allow and log the access and reverify the password
16
Prevent the access
The resource name used during validation. This field can show up to a maximum of 256 characters.
The NEXTKEY parameters that CA ACF2 for z/VM used to find the matching rule entry. The rule that prevented or allowed the access is also shown in the resource violation LOOKUP KEY field. If the reason for a prevent was no record found, the last entry in this table indicates the rule set record that CA ACF2 for z/VM could not locate.
|
Copyright © 2009 CA Technologies.
All rights reserved.
|
|