Reference Guide › Command Reference › LOGMSG Command

LOGMSG Command

Use the LOGMSG command to manage messages to send to user IDs at specific events. You must have the Rules Facility installed to use this command.

LOGMSG ["Parms"] [(ERASE]

Parms:

  *
| groupname
| DIALFAIL
| LOGFAIL
| NORULE
| SYSTEM

Definitions

[ *| groupname | DIALFAIL | LOGFAIL | NORULE | SYSTEM]

Puts you in a file in which you can create a message. The default is your default security group as specified in your directory entry.

If you specify groupname, you can create a message to display in addition to the SYSTEM log message each time a user ID in the security group groupname logs on. The security group must be specified in the SECURITY CONFIG file.

DIALFAIL creates a message to send to a user ID whose DIAL procedure did not complete successfully because of an invalid password or a rule rejecting the CP DIAL command.

LOGFAIL creates a message to send to a user ID whose logon procedure did not complete successfully because of an invalid password or a rule rejecting the logon.

NORULE creates a message to send to a user ID issuing a request that is accepted or rejected based on the NORULE record in the SECURITY CONFIG file. You must include a DISPRULE ALL or DISPRULE NORULE record in the SECURITY CONFIG file for this log message to appear.

SYSTEM lets you create a message to send to all user IDs at logon time.3

[ERASE]

Erases the specified message file.

Description

The LOGMSG command supplements the CP log message facility. It allows you to create messages to send to user IDs at specific events, such as logon, issuing requests that are not covered by a rule in the Rules database, or making an error in the LOGON or DIAL procedure.

The LOGMSG command places you in a file in which you can write the desired log message for each type of event. Message files are stored on the CA VM:Secure A‑disk.

Examples

• You have just installed the Rules Facility and are writing rules to restrict system access. During this time, you are using a NORULE ACCEPT record in the CA VM:Secure SECURITY CONFIG file for your system, so that users can still have access to resources. To help you to create the necessary rules, create a message that displays after each access request that was accepted by the NORULE ACCEPT record. This message tells the issuer to contact a security administrator to write a rule so that the issuer can perform a certain activity. Create the message by entering:

  vmsecure logmsg norule
  

  You are placed in a file so that you can enter the text of the message. When you are finished, save and exit the file.

  In order for this log message to appear, you must also include a DISPRULE ALL or DISPRULE NORULE record in the SECURITY CONFIG file.

• You have created all the necessary rules to make your system closed, and you now have a NORULE REJECT record in the CA VM:Secure SECURITY CONFIG file. You no longer need users to receive the NORULE message, so you delete it by entering:

  vmsecure logmsg norule (erase
  

• To create a logon message for members of security group ADMINGRP, enter:

  vmsecure logmsg admingrp
  

  You are placed in a file so that you can build a log message to be sent to members of ADMINGRP when they log on.

• To create a log message to be sent to all users as they log on, enter:

  vmsecure logmsg system
  

Note: For information about displaying existing log message files, see the QUERY Command.