QAUDJRN immediate alert when QSECOFR password is entered incorrect or User Profile becomes disabled

0 pts.
Tags:
AS/400
Hi there; I have asked this question before, however I must have explained it wrong. I am trying to achive is the following: 1 - *AUTFAIL is on for QSECOFR in QAUDJRN 2 - if entry for "Wrong password entered" is added to QAUDJRN for QSECOFR I need to be alerted immediately, Message to a specific message queue is fine, other ways also accepted. 3 - if entry for "User Profile disabled" is added to QAUDJRN for QSECOFR I need to be alerted immediately, Message to a specific message queue is fine, other ways also accepted. Any ideas? If I create a "looping" program to review QAUDJRN, it consumes too much system resources. I need the notification to occur upon any of the above entries being added to the QAUDJRN. Bruno (aka Mutkey)
ASKED: September 15, 2005  5:32 PM
UPDATED: November 17, 2009  10:00 PM

Answer Wiki

Thanks. We'll let you know when a new response is added.

www.halcyonsoftware.com sell a product called “Audit Journal Monitor” which provides real time escalation of QAUDJRN entries, including (and I quote)….

“Quickly detect when invalid attempts are made to signon – especially if this happens to be QSECOFR”

www.ahtechnology.com.au also sell an equivalent product called Audit+++ that claims to do the same thing.

The existence of these 2 products means that it is possible to write a real time monitor for QAUDJRN that doesn’t screw the system (you would hope).

Personally, I would have thought that a CLP that uses RTVJRNE ENTTYP(PW) in a never ending loop, with an updated FROMTIME/TOTIME range wouldn’t be intrusive (I just ran DSPJRN for a 10 second period and the response was instantaneous)

Alternatively, you could just create QSYSMSG message queue in QSYS. Disabled profile messages (CPF1393) are sent there, as well as QSYSOPR. Put QSYSMSG into *BREAK (it only receives security messages, unlike QSYSOPR). See…

http://search400.techtarget.com/tip/0,289483,sid3_gci1019072,00.html

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • JPLamontre
    Know you have targetted your source of information (a journal or a message queue, it's quite the same thing) Now, you can tune resource consumption by running at priority 90 and sleeping enough between each run, depending on what means immediatly for you (milli seconds ? seconds ? minute ? more ?) On my side, I inspect QSYSOPR each 1/4 hour for all gravity>40, it's enough
    0 pointsBadges:
    report
  • TomLiotta
    The simplest resolution is to leave QSECOFR as disabled. There shouldn't be more than a few times a year when you'd need it *ENABLED -- version/release upgrades, cumulative and maybe a couple group PTF applications. When else should it ever be enabled? Tom
    125,585 pointsBadges:
    report
  • Whatis23
    This is an old question and hopefully you're already using iNav for this. Open ISeries Navigator Expand Management Central Expand Monitors Right click on Message then New Monitor Name your monitor with description then click on the Message Tab From here you can add specific MSGIDs or a generic range and use the trigger or reset command to email or text to your cell phone when the error occurs
    5,665 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following