Re: Capturing FTP Login Errors

James, It reads like you are trying to capture inbound FTP login attempts to the system. If so if you have audit logging turned on you will see invalid FTP attempts in the QAUDJRN.

DSPJRN JRN(QAUDJRN) ENTTYP(PW) PGM(QTMFSRVR)

Leaving off the PGM() parm will capture all invalid login attempts.


Bryan


James LeLeux said the following on 3/27/2012 8:01 PM:

Hello all, new to the group, wandered over from the MAPICS board.


We are running V5R1 and have a CLP to capture login errors for SOX
purposes, but discovered we weren't capturing FTP login failures.

We tried various methods and could not get a bad FTP login to register an
error in the log.

Anyone have some suggestion on how to do this?

What triggered this was some stray routine appears to be disabling our FTP
profile and if we can log the time, that might help us trace the culprit.
Of course, once we saw FTP wasn't logged, we figured we needed to add it to
our SOX data (because we don't have enough!).
This is only an internal account, the box is not exposed to the internet.

FYI - here's our syntax:
DSPLOG PERIOD((*AVAIL&CHRDTE) (*AVAIL&CHRDTE)) +
OUTPUT(*PRINT) MSGID(CPF2234 CPF1393)


Thanks in advance for any insight!

BTW - no cracks about the V5R1, we just ordered a new box with V7R1 -
finally! :)


Regards...james