Safeguard Audit Service Manual (G06.24+, H06.03+)

Audit File Record Formats
Safeguard Audit Service Manual—520480-014
A-69
User Authentication Record
06 ZAUTHORITY-READ TYPE ZSPI-DDL-UINT.
END.
Field Definitions
ZSFG-DDL-USER-SUBREC contains these fields:
ZPASSWORD-CHANGED
indicates, if nonzero, that the password was changed.
ZDEFAULTVOLUME
is the default volume and subvolume at the time of the authentication attempt.
ZDEFAULTSECURITY
is a 16-bit field specifying the default Guardian security vector that applies to disk
files created by this user and not protected by the Safeguard software. Bits <4:15>
of this field are defined by the SETMODE 1 (file security) system procedure call.
For more information, see the Guardian Procedure Calls Reference Manual. Bit
<2>, when set, indicates that the user profile record includes Safeguard default
protection attributes.
ZLOGONFAILCOUNT
is a count of the number of failed logon attempts since the last successful
authentication of this user.
ZAUDIT-AUTHEN-PASS
indicates that successful authentication attempts are audited according to the
specified values. This field was previously called ZAUDIT-ACCESS-PASS. The old
name is no longer supported. Possible values are:
ZSFG-VAL-AUDIT-ALL
Audit local and remote authentication attempts.
ZSFG-VAL-AUDIT-LOCAL
Audit local authentication attempts.
ZSFG-VAL-AUDIT-NONE
No authentication attempts are audited.
ZSFG-VAL-AUDIT-REMOTE
No authentication attempts are audited. Authentication attempts can be audited
only on the system where they occur.