Will fix SO16055 offset existing column/row layout ?

Products

• Top Secret

Issue/Introduction

SO16055 ADD SIGNON PASSWORD CHANGE INDICATOR TO AUDIT RECORD has the following description.

 ENHANCEMENT DESCRIPTION:
 Add flag $FLPWC to the SMF Type 80 and Audit Tracking File record to indicate a password change has occurred during  a system entry signon.  This new flag resides in field FLIND1 in the SMF80 record FLOG extension.

 CAKOMAC0 #FLOG macro is also updated to reflect all currently mapped fields. The $FLPWC flag can be used along with  the FLEVENT $S80INIT flag to determine if a signon password change has occurred.

 FLEVENT = $S80INIT (x'01') + FLIND1 = $FLPWC (x'01')
 - These two flags together indicate a password or phrase change has occurred at signon.

Will SO16055 change the record layout of the Audit record?

 

 

 

 

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

The new flag does not make any changes to any existing reports.  The flag bit is set in a pre-existing field in the SMF or ATF record.   The purpose of this flag is to provide additional information to clients who have their own applications that perform site specific parsing of the SMF records.