I want to log the use of the TSO proc that users are logging on with. How is that done?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

I want to log the use of the TSO proc that users are logging on with.  How is that done?

Environment

Release:
Component: ACF2MS

Resolution

ACF2 has internal code to validate the TSO proc of users with a type code of TPR.  The following bit field on the ACF2 logonid record turns on user validation:

VLD-PROC|NOVLD-PROC 
Indicates that CA ACF2 validates the TSO procedure name of a user. You must create a resource rule with a type code of TPR and a $KEY of the procedure name so that CA ACF2 performs this validation. (Bit field) 

So write a rule like this: 

$KEY(********) TYPE(TPR) 
UID(-) LOG 

CHANGE INFODIR TYPES(R-RTPR) ADD 
F ACF2,REFRESH(INFODIR) 
F ACF2,REBUILD(TPR) 

Then add VLD-PROC to users that you want to be checked. If you want this for all TSO users, you could do this: 

CHANGE UID(-) IF(TSO) VLD-PROC 

After you do this, every TSO logon will cut an SMF record that can be viewed on the ACFRPTRV report with a resource like this: RTPR-tsoproc and the user that made that call happen.