AS/400 users profile changed
Can anyone provide me with information to query and produce a report that shows who was changed the user profile ?
Software/Hardware used:
Software
Software/Hardware used:
Software
ASKED:
October 2, 2011 9:58 AM
UPDATED:
March 31, 2012 12:53 AM
Answer Wiki:
Thanks,
i have write this program:
PGM
DSPAUDJRNE ENTTYP(CP) FROMTIME(*FIRST) OUTPUT(*PRINT)
RUNQRY QRY(LIB/QSECCP1)
SNDPGMMSG MSG('File LIB/USERSLOG was replaced') TOUSR(USERID)
ENDPGM
To see all answers submitted to the Answer Wiki: View Answer History.
The above command will list all CP (Change Profile) actions that were logged in the system audit journal.
It will find entries in the current journal receiver — change the JRNRCV() parameter to select other receivers. It will restrict the entries to those occurring after 1:00 AM on Oct 1, 2011 — change the FROMTIME() parameter to look at a different starting date/time, and add the TOTIME() parameter to choose and ending time if you need a particular range. And it will display the list — change the OUTPUT() parameter to choose a different output device, such as *PRINT.
The use of the command assumes that you had system auditing enabled when the profile changes happened and that you have the receivers available on the system or that you can restore them. If those conditions can’t be met, then it might not be possible to create such a report. You would need to have some custom function that kept track and we wouldn’t know what that was.
Tom
Tom,
where is the command ?
Just type DSPAUDJRNE on a command line and press F4 to fill in the fields.
where is the command ?
It might depend on the version of your OS. What version do you have?
If you are on a much older version, try the GO SECTOOLS command to see if the SECTOOLS menu exists. If it exists, look for options that provide reports. There should be a report option something like ‘Audit journal entries’ and that option should run the DSPAUDJRNE command or a very similar command.
If you don’t have SECTOOLS, I seem to recall that it was originally available as an extra option that needed to be installed. It might have been a QUSRTOOL function.
Make sure that you are running with high enough authority.
If you cannot use DSPAUDJRNE, you can always use the main DSPJRN command to print journal entries or to dump them to an outfile. From an outfile you can run queries to create reports.
Tom