Re: Auditing invalid logons via FTP

[rob@xxxxxxxxx]

Look at the sample code in the redbook "Cool title about the AS/400 and the
Internet".  I used their ftp exit point.  But I created a custom log for
all access.  Other users check that file pretty religiously.

Rob Berendt

==================
A smart person learns from their mistakes,
but a wise person learns from OTHER peoples mistakes.


                                                                                
                                      
                    "alan shore"                                                
                                      
                    <SHOREA@dime.com>       To:     <RPG400-L@midrange.com>     
                                      
                    Sent by:                cc:                                 
                                      
                    owner-rpg400-l@mi       Subject:     Auditing invalid 
logons via FTP                              
                    drange.com                                                  
                                      
                                                                                
                                      
                                                                                
                                      
                    08/09/2001 03:23                                            
                                      
                    PM                                                          
                                      
                    Please respond to                                           
                                      
                    RPG400-L                                                    
                                      
                                                                                
                                      
                                                                                
                                      




We are attempting to introduce tranferring files from the AS/400 to an IBM
mainframe. One  of the auditing concerns is to reject an invalid user-id.
This was accomplished by using the FTP Logon exit point with a program,
validating a user-id against an authorization list. If the user-id is in
the authorization list, allow the user to log onto the AS/400 via FTP,
otherwise reject the user-id.
This procedure is working, but NOTHING is showing up in the Audit journal.
The question is, does anyone have any ideas on how to capture ANY
information for invalid attempts to the Audit journal.
If any more data is required, please ask the question, and I will attempt
to answer it.
Thanks in advance

+---
| This is the RPG/400 Mailing List!
| To submit a new message, send your mail to RPG400-L@midrange.com.
| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---