Re: authentification success/failure logging

["Jim Franz" <franz400@xxxxxxxxxxxx>]

DSPJRN JRN(QAUDJRN) RCVRNG(*CURCHAIN) ENTTYP(AF) OUTPUT(*PRINT)
jim
----- Original Message -----
From: "Jerome Draper" <jdraper@xxxxxxxxxxxxx>
To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
Sent: Tuesday, July 08, 2003 2:46 PM
Subject: Re: authentification success/failure logging


> I am not seeing an AF journal in wrkjrn so it might not be turned on or
its
> somewhere else.
>
> ??
>
> Jerry
>
> Quoting Vern Hamberg <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>:
>
> > Jerry
> >
> > You might look at the security audit journal. There is an entry type,
AF,
> > for authentication failures. I don't know whether it includes NetServer
> > failures.
> >
> > HTH
> >
> > Vern
> >
> > At 04:16 PM 7/7/2003 -0700, you wrote:
> > >What is the best method to monitor any authentification success or
failure
> > on
> > >an AS400?
> > >
> > >Success issue:
> > >We are working on an issue where active directory on our W2K network
sees
> > an
> > >authentification failure when a successful mapping of an IFS drive
occurs.
> > >
> > >Failure issue:
> > >We know that three AS400 IFS drive mapping authentification failures
will
> > >lock
> > >a user out of the W2K network.  These same authentification failures
will
> > >also
> > >prevent them from mapping an IFS drive until we run CHGUSRPRF
<USERNAME>
> > >[enter] without changing anything.  It will not disable them out of a
green
> > >screen.
> > >
> > >We would like to find the place on the AS400 that logs authentification
> > >successes and/or failures to give some visibility to this issue.
> > >
> > >Jerry
> > >
> > >Jerome Draper, Trilobyte Software Systems
> >
> >
> > _______________________________________________
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.
> >
> >
> >
>
>
> Jerome Draper, Trilobyte Software Systems
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>