RE: Audit Journal Entry

Chad B wrote on 09/26/2006 03:59:21 PM:

Object . . . . . . . :                   Library  . . . . . . :
Member . . . . . . . :
Incomplete data  . . :   No              Minimized entry data :   No
Sequence . . . . . . :   7315973
Code . . . . . . . . :   T  - Audit trail entry
Type . . . . . . . . :   GR - General purpose audit record

            Entry specific data
Column      *...+....1....+....2....+....3....+....4....+....5
00001      'FZRWU03              *CHKUSAGE                             '
00051      '
'
00101      '                             QIBM_QTMF_SERVER_REQ_'
00151      '3
'
00201      '
'
00251      '
'


Above is one of the detailed entries, I know it's from an FTP server job,
and I'm pretty sure there's some type of exit program helping to secure

FTP

on this box.  The entries are occurring in the course of normal program
operations, so I don't want to stop the occurance of the events, but

would

like to not record them as journal entries .

My take on this audit data is that a function usage API was called to check
the user WU03 to see if they were authorized to use the
QIBM_QTMF_SERVER_REQ_3 function. The function usage APIs and CL commands
are a different interface Application Administration on a PC.  When is use
DSPFCNUSG for QIBM_QTMF_SERVER_REQ_3 on my system I see that it has a
description of "Use of server subcommand CWD to change current directory".
So it does not sound like the function of an exit program to me.

Ed Fishel,
edfishel@xxxxxxxxxx