Safeguard Audit Service Manual (G06.29+, H06.08+, J06.03+)

Audit File Record Formats
Safeguard Audit Service Manual — 520480-031
A - 81
User Authentication Record
ZSFG-VAL-AUDIT-REMOTE
No authentication attempts are audited. Authentication attempts can be audited
only on the system where they occur.
ZAUDIT-MANAGE-PASS
indicates that successful attempts to manage the user authentication record are
audited depending on these values:
ZSFG-VAL-AUDIT-ALL
Audit local and remote management attempts.
ZSFG-VAL-AUDIT-LOCAL
Audit local management attempts.
ZSFG-VAL-AUDIT-NONE
Do not audit management attempts from any source.
ZSFG-VAL-AUDIT-REMOTE
Audit remote management attempts.
ZAUDIT-MANAGE-FAIL
indicates that unsuccessful attempts to manage the user authentication record are
audited depending on these values:
ZSFG-VAL-AUDIT-ALL
Audit local and remote management attempts.
ZSFG-VAL-AUDIT-LOCAL
Audit local management attempts.
ZSFG-VAL-AUDIT-NONE
Do not audit management attempt
s from any source.
ZSFG-VAL-AUDIT-REMOTE
Audit remote management attempts.
ZAUDIT-USER-ACTION-PASS
indicates all successful attempts by the user to access protected object
s or
manage Safeguard protection records. When the Safeguard global configuration
attributes AUDIT-CLIENT-OSS and AUDIT-OSS-FILTER are enabled, the AUDIT-
USER-ACTION-PASS attribute enables or disables OSS auditing. These attempts
are audited depending on these values: