XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Chapter 7. XAC Auditing and Audit Reports
XYPRO Technology Corporation 64 Proprietary and Confidential
message will be written to the EMS log from each running XYGATEAC process that
encounters the error. The audit file check will also be tried after a timeout occurs, if a
timeout is defined, or after 5 minutes.
Note: XYGATEAC processes that are waiting for a modem connection on a dialup port
will not perform an audit file rollover because control is not returned to the
XYGATEAC process from the operating system until the modem connection
succeeds.
XAC Audit trail rollover occurs when the audit diskfile fills up. When XAC is unable to
write an audit message to the audit diskfile because there is not enough room left (that
is, it received an error 45 while writing), it renames the current audit diskfile and
creates a new file. The full audit diskfile is renamed using the first-three characters of
the current file’s name followed by a five-digit sequence number. A new file is created
with the original name and the same format as the original file. Processing continues.
The filenames continue to increment each time a new audit file is created. Refer to
“XAC_ROLL_AUDIT” described in Appendix E18: on page 270.
7.1.3 Resizing AUDIT Files Using the XAC_NEXTGEN Macro
To resize an AUDIT file after audit has been initiated, use the XAC_NEXTGEN macro
described in Appendix E16: on page 268. Change the value of the EXT(pri,sec,max)
sub-keyword in the ACCONF file and rename the existing AUDIT files manually for the
new ones to be created.
It may be necessary to rename the AUDIT file to the next rolled-over iteration; that is,
AUD#####. The following is an example of how to check what the next AUD#####
should be:
1. Volume to the installation subvolume.
2. Run XAC INSTALL to attach the segment. (Refer to the XAC macro described in
Appendix E5: on page 249.)
3. Check the AUDIT file that will use the current EXT by executing #OUTPUT
[XAC_NEXTGEN <audit initial>].
4. Open the ACCONF file and change the EXT settings.
5. Run the XAC_SYNTAX_CHECK macro to make sure there are no syntax errors on
both the ACCONF and ACACL files.
6. Run the XAC_ROLL_AUDIT macro to find out what the next AUD##### should be.
7. Check the AUDIT file that will use the changed EXT from now on by executing
#OUTPUT [XAC_NEXTGEN AUD].
Example:
$SYSTEM XYGATEAC 5> FI $VIK.XYGAUDIT.ACL*