XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
(XUA) 1.85 Reference Manual
Appendix A: The UACONF File
XYPRO Technology Corporation 207 Proprietary and Confidential
A4: AUDIT (Process Name or Device)
Any one of the nine available AUDIT keyword entries can be defined as a process
audit trail. The most common process audits are EMS and printing to the CONSOLE.
Note: XYPRO does not recommend that XYGATEUA be configured to audit its activity
to EMS.
Syntax:
AUDIT $<process-name> [CONSOLEPRINT] [EMS] [CRITICAL]
CONSOLEPRINT
The optional CONSOLEPRINT sub-keyword causes the text token of messages that
are logged to a collector, to also print on the console.
The Example below will send XUA audits to the console.
Example: How to configure XUA to audit to the CONSOLE
AUDIT $0 CONSOLEPRINT
Please note that the text tokens are limited to 128 characters.
EMS
The optional EMS sub-keyword is used to generate Event Management System (EMS)
format audits. It should be used only when auditing to $0 or an EMS alternative
collector.
Example: How to configure XUA to audit to the EMS
AUDIT $0 EMS
CRITICAL
Critical is an audit attribute that is set on for authentication denials when the
EMS_CRITICAL_IF_DENIED ON entry exists. When the CRITICAL sub-keyword is
included after the AUDIT keyword, authentications whose audit attribute is marked
critical are the only included audits. When the destination location is a collector and the
EMS sub-keyword is included, those messages also have the EMS critical option set.
Example: How to configure XUA to flag denied logon as CRITICAL
AUDIT $0 EMS CRITICAL
EMS_CRITICAL_IF_DENIED ON
Please note that the AUDIT sub-keyword CRITICAL means that messages must be
marked critical in order to be sent to EMS, and the keyword
EMS_CRITICAL_IF_DENIED must be set to ON for XYGATEUA to mark denials as
critical.