Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Audit File Record Formats
Safeguard Audit Service Manual — 520480-031
A - 78
User Authentication Record
ZCI-SWAP
is the swap volume or file used with this command interpreter.
ZCI-NAME
is the process name assigned to the command interpreter when it runs at this
terminal.
ZCI-CPU
is the processor number in which this command interpreter runs.
ZCI-PRI
is the priority at which this command interpreter runs.
ZCI-PARAM-TEXT
is the startup parameter text passed to the command interpreter when it is started
at this terminal.
ZFREEZE
indicates, if nonzero, that this terminal definition is frozen.
User Authentication Record
The Safeguard software maintains a record for each user or alias that it can
authenticate. Most of the information contained in this record is included in the event
description of each audited authentication attempt and each audited attempt to
manage the user record.
When these events are audited and recorded in the audit trail, a representation of the
user or alias record is included in one or more secondary audit records. This
information is represented by a ZSFG-DDL-USER-SUBREC variant of the ZTEXT-
AREA field in secondary audit records.
DDL Definition
DEF ZSFG-DDL-USER-SUBREC.
02 ZPASSWORD-CHANGED TYPE ZSPI-DDL-UINT.
02 ZDEFAULTVOLUME TYPE ZSPI-DDL-BYTE OCCURS 47 TIMES.
02 ZDEFAULTSECURITY TYPE ZSPI-DDL-UINT.
02 ZLOGONFAILCOUNT TYPE ZSPI-DDL-UINT.
02 ZAUDIT-AUTHEN-PASS TYPE ZSPI-DDL-ENUM.
02 ZAUDIT-AUTHEN-FAIL TYPE ZSPI-DDL-ENUM.
02 ZAUDIT-MANAGE-PASS TYPE ZSPI-DDL-ENUM.
02 ZAUDIT-MANAGE-FAIL TYPE ZSPI-DDL-ENUM.
02 ZAUDIT-USER-ACTION-PASS TYPE ZSPI-DDL-ENUM.
02 ZAUDIT-USER-ACTION-FAIL TYPE ZSPI-DDL-ENUM.
02 ZFREEZE TYPE ZSPI-DDL-UINT.
02 ZPASSWORDPERIOD TYPE ZSPI-DDL-UINT.