CA‑Earl and the output of the TSSCFILE utility provide formatted summaries of CA Top Secret data. This expanded reporting function gives you the capability to generate additional administrative summary reports.
The following JCL resides in the CAI.TSS.CAIJCL file on the distribution tape:
//Earl EXEC PGM=Earl,REGION=4096K
//EarlLIB DD DISP=SHR,DSN=&USERLIB.
//EarlOBJ DD UNIT=&UNIT.,SPACE=(3200,(50,4),RLSE)
//SYSUT1 DD UNIT=&UNIT.,SPACE=(3200,(15,4),RLSE)
//SYSUT2 DD UNIT=&UNIT.,SPACE=(3200,(4,4))
//SYSUT3 DD UNIT=&UNIT.,SPACE=(3200,(4,4))
//SYSUT4 DD UNIT=&UNIT.,SPACE=(3200,(10,4),RLSE)
//SYSUT5 DD UNIT=&UNIT.,SPACE=(3200,(70,4),RLSE)
//SYSUT6 DD UNIT=&UNIT.,SPACE=(3200,(15,1),RLSE)
//SORTIN DD UNIT=&UNIT.,SPACE=(3200,(70,4),RLSE)
//SORTOUT DD UNIT=&UNIT.,SPACE=(3200,(70,4),RLSE)
//WORK1 DD UNIT=&UNIT.,SPACE=(3200,(300,200))
//SORTWK01 DD UNIT=&UNIT.,SPACE=(3200,(70,4))
//SORTWK02 DD UNIT=&UNIT.,SPACE=(3200,(70,4))
//SORTWK03 DD UNIT=&UNIT.,SPACE=(3200,(70,4))
//SYSUDUMP DD &SYSOUT=*.
//SYSPRINT DD &SYSOUT=*.
//SYSOUT DD &SYSOUT=*.
//SYSIN DD DISP=SHR,DSN=&USERLIB. (&REPORT).
PEND
Defines the CA Earl macro library. This source statement library is referenced by the COPY statement within the user's CA‑Earl source program.
Defines the file on which the CA Earl text file is stored.
Defines the temporary hit file, which contains only the fields from the input records, which are needed to produce the final printed reports. If required to sort the hit file, SORTIN defines the input file to the stand‑alone sort invoked by CA Earl.
Defines the temporary output file from the stand‑alone sort.
Defines the SRAM (Sort Reentrant Access Method) file.
Used with SORTWK02 and SORTWK03, defines the temporary work files for the stand‑alone sort.
The name of your TSSCFILE OUT file. You must run TSSCFILE before running TSSREPORT. See the topic JCL Requirements in the chapter “TSSCFILE Utility” for the JCL needed to run that utility.
You can generate reports by putting the TSSCFILE output (OUT DD) in a permanent data set and using this data set to run multiple CA‑Earl reports. This saves time by allowing you to run many reports from the same data.
You can also run TSSCFILE and write the output to a temporary data set. Use this temporary data set as input for your TSSREPORT JCL.
The input control statement. Put the name of the report you wish to run after the name of your source library: TSSEarl1, TSSEarl2, or whichever report you want, up to 7.
Note: PARM= in the JCL refers to the input parameters as defined in the next section.
Reports 1 through 7 are described in the following pages. Input parameters, if any, appear in the boxes and are followed by definitions of both required and optional parameters. The headers that appear on each report output follow the respective report sample.
The DATE format for reports 1, 2, and 3 is MM/DD/YY. This can be modified with the CA‑Earl installation options.
Note: See the topic Command Syntax in the chapter “TSSUTIL Utility” for a list of syntax conventions to be used in these reports.
This sample report lists all ACIDs that are inactive. An ACID is considered “inactive” and is denied access to the system after a specified amount of time that was predetermined with the INACTIVE control option. The ACIDs in this report would get suspended during the next signon attempt.
To generate the report:
TSS LIST(acids) DATA(ALL,PASS)
PARM='INACTIVE(nnn)'
Specifies a number that matches the site‑selected INACTIVE control option parameter, which is any number from 0 through 999.
The generated report shows the following information:
Lists the inactive ACIDs.
Lists the user name associated with each ACID.
Lists the date that the product denied the ACID access to the system.
Example: A user's last logon was January 1, 2014, and the user's password expired on February 1. If nnn is 30, the inactive date would be reported as March 2 (30 days after the password expired).
Note: A 1980 date under DATE INACTIVE means that the user's password had been assigned the EXP parameter (to expire immediately).
If your site does not use the default date (mm/dd/yy) in CA Top Secret, you encounter a U3000 abend. To use the alternate date format, edit the TSSEARL1 job with the following statements:
DEF S_EXP_MO = S_EXPO_ 3 ‑ 4 N DEF S_EXP_DA = S_EXPO_ 1 ‑ 2 N DEF EXP_MO = R3000XPD 1 ‑ 2 N DEF EXP_MO = R3000XPD 4 ‑ 5 N
See the comments in member TSSEARL1 contained in CAI.SAMPJCL.
Lists all ACIDs that are expired.
PARM=
There are no input parameters for this report.
Lists the expired ACIDs.
Lists the user's name associated with each ACID.
Lists the date each ACID expired.
Lists all ACIDs that are suspended.
PARM=
There are no input parameters for this report.
Lists the suspended ACIDs.
A P in this column means that the listed ACID is a profile ACID.
Lists the name associated with each listed ACID.
Output appears here only if the ACID in question has been temporarily suspended. This is the date it will resume after the temporary suspension.
Lists ACIDs in alphabetical order by name. The following parameters may be used to specify the order in which the user wants the ACIDs sorted. One and only one of the first four parameters must be specified; the delimiter and A or D are optional.
PARM='FIRST|LAST|Pnn|Cnn[,delimiter][,A|,D]
This parameter sorts by first name, starting with the first nonblank character in the name field.
This parameter sorts by last name, starting with the first character following the last delimiter found, or, if no delimiters are found, starts with column 1.
This parameter sorts by nnth positional subfield. The subfield to be sorted starts with the first character after the (nn‑1)th delimiter and ends with the next delimiter or the last character in the name field, whichever occurs first. If a subfield specified is outside the range of fields found on a name being sorted, the following error message is generated:
***SUBFIELD nn WAS NOT FOUND IN THE NAME FIELD***
This parameter sorts by the entire name field, beginning with column nn (with nn equaling a number 1 through 20), and ending with the last character in the name field.
This parameter is optional. It cannot be used if Cnn was used. The delimiter is the one‑byte character indicating a separation between positional subfields within the ACID name (such as a comma, blank, or hyphen). Default is a blank.
This parameter is a default. It sorts in ascending alphabetical order (EBCDIC collating sequence). If this parameter is selected, a report is also generated in descending order, with the note: “Descending order report not selected for this run”. Conversely, a request for descending order will result in the additional ascending‑order report and note.
This parameter sorts in descending alphabetical order. If not specified, the default is A.
Note: Remember to enter your parameters exactly as shown in the example. Even if the delimiter you select is a comma, you must still use a comma before this delimiter, as shown next.
PARM='P8,,,D'
The report title indicates which options were selected, and which delimiter, if any, is used.
VERSION 9.0 ADMINISTRATIVE REPORT UTILITY PAGE 1 JUL 23 02 REPORT 4: REPORT OF ACID NAMES SORTED ON LAST NAME IN ASCENDING ORDER, USING ' ' AS A DELIMITER ‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑ NAME ACID ‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑‑ FROPH01 DIV #1 FROPHV1 FROPH01 DIV #2 FROPHV2 FROPH01 DIV #3 FROPHV3 FROPH01 DEPT A FROV1DA FROV1DA USER A 1DAUSRA FROV1DA USER A 1DBUSRA FROPH01 DEPT B FROV1DB FROV1DA USER B 1DBUSRB FROV1DA USER B 1DAUSRB FROV1DA USER C 1DBUSRC FROV1DA USER C 1DAUSRC FROV1DA USER D 1DAUSRD FROV1DA USER D 1DBUSRD FROV1DA USER E 1DAUSRE FROV1DA USER E 1DBUSRE FROV1DA USER F 1DAUSRF FROV1DA USER F 1DBUSRF VCA FOR DIV FROPHV1 FROVC11 VCA FOR DIV FROPHV2 FROVC21 VCA FOR DIV FROPHV3 FROVC31 VCA FOR DIV FROPHV3 FROVC32 DCA FOR DEPT FROV1DA FRODC1A1 DCA FOR DEPT FROV1DA FRODC1A2 DCA FOR DEPT FROV1DB FRODC1B1 FROV1DA USER G 1DAUSRG FROV1DA USER G 1DBUSRG FROV1DA USER H 1DAUSRH FROV1DA USER H 1DBUSRH FROV1DA USER I 1DAUSRI FROV1DA USER I 1DBUSRI FROV1DA USER J 1DAUSRJ FROV1DA USER J 1DBUSRJ DEPT FROV1DA PROF FRO1AP1 DEPT FROV1DB PROF FRO1BP1 DEPT FROV1DB PROF FRO1BP3 DEPT FROV1DB PROF FRO1BP2 DEPT FROV1DA PROF FRO1AP3 DEPT FROV1DA PROF FRO1AP2 END OF REPORT
Lists the given names in the order specified.
Lists the ACID associated with each name.
Lists ACIDs in alphabetical order by selected positions within the ACID.
PARM='[Scc][,Ecc][,A|,D]
This parameter sorts by starting column position within the ACID. Select column 1 through 8. This parameter is optional. Default is S1.
This optional parameter sorts by ending column position within the ACID. The default is E8. Select column 1 through 8, but the number must be greater than or equal to Scc. If an Ecc is specified that is less than Scc, the job will terminate execution and the following message will appear in place of the report:
INVALID PARAMETER‑NO REPORT PRODUCED
This is the default parameter. This parameter sorts in ascending alphabetical order (EBCDIC collating sequence). If this parameter is selected, a report is also generated in descending order, with the note: “Descending order report not selected for this run.” Conversely, a request for descending order will result in the additional ascending‑order report and note.
This parameter sorts in descending alphabetical order. If not specified, the default is A.
The report title indicates whether ascending or descending order was selected, and which starting and ending column positions were selected for the sort.
Lists the ACIDs in the order specified.
Lists the given name for the ACIDs being listed.
Lists ACIDs that have the attribute specified.
PARM='[attribute]'
The attribute is any CA Top Secret attribute that may be assigned to a user or profile ACID.
Lists the ACIDs that have the attribute.
A P under this header indicates that the ACID is a profile ACID.
Lists the given name for the ACIDs being listed.
Refers to the attribute specified.
An asterisk appears before each BYPASS attribute: NODSNCHK, NOVOLCHK, NOLCFCHK, NOSUBCHK, NORESCHK.
When an ACID having the attribute requested is found, all of that ACID's attributes (BYPASS or non‑BYPASS) is shown. If no PARM was specified, all ACIDs having any attribute is shown.
Lists ACIDs that have administrative authorities, and their scope of authority.
PARM=
There are no input parameters for this report.
Lists the ACIDs.
Lists each ACID type: MASTER, CENTRAL, LSCA, ZONE C/A, DIVISION C/A, DEPARTMENT C/A, PROFILE or USER.
Lists scope of authority with the format
ACIDNAME(scope)
If the TYPE is MASTER or CENTRAL, the scope is ALL.
Authority type is one of the following: FACILITY, ACID, LIST DATA, MISC1, MISC9, RESOURCE, or a predetermined specific resource class name, such as DATASET.
The ACID's authority levels are listed after Authority Type. See the chapter “Using the FDT Record” in the Command Functions Guide for information about authority levels.
After authority level:XAUTH, “access” indicates the access levels the ACID may use to cross‑authorize (PERMIT) users to the corresponding resource after authority type. The TSS command for TSSCFILE for this particular report is:
TSS LIST(acids) DATA(ALL)
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|