How to turn on or off the security trace in the activity log from a Solve or Netmaster region ?

Products

• CMDB for z/OS
• NetSpy Network Performance
• NetMaster Network Automation
• SOLVE
• NetMaster Network Management for SNA
• NetMaster Network Management for TCP/IP
• NetMaster File Transfer Management
• SOLVE:Operations Automation
• SOLVE:Access Session Management
• SOLVE:FTS

Issue/Introduction

Question :

How to turn on or off the security trace in the activity log from a Solve or Netmaster region ?

 

 

Environment

Release: SLOPFC00200-12.1-NetMaster-File Transfer Management
Component:

Resolution

Answer :

This solution is only valid with NMSAF partial security exit activated by SEC=NMSAF parm in RUNSYSIN.

By default settings in SXPARMS member located in hlq.PARMLIB, the security trace is enabled and produced the following traces :

*** CALL *** FUNC=00 (INITIALISATION) SF=- UID=SOLVE TM/DT=095021322016238
PARM 01 0019B1FC 00
PARM 02 00000000
PARM 03 0019B204

PARM 04 0019B220 0000000000000000
PARM 05 00000000
PARM 06 00000000
PARM 07 00000000
PARM 08 00000000
PARM 09 00000000
PARM 10 00000000
*** RETURN *** RC=00
PARM 01 0019B1FC 00
PARM 02 00000000
PARM 03 0019B204
PARM 04 0019B220 0019F0000019F1F4
PARM 05 00000000
PARM 06 00000000
PARM 07 00000000
PARM 08 00000000
PARM 09 00000000
PARM 10 00000000

*** CALL   *** FUNC=08 (USER LOGON)             SF=16 UID=BMON TM/DT=095021322016238

......
......

 

 

These traces are generated next to the following setting:

************************************************************************
* *
* THE FOLLOWING PARAMETERS CONTROL THE NMSAF EXIT TRACE FACILITY. *
* *
* REMEMBER THAT ENABLING TRACING REQUIRES THAT THE SXTRACE DDNAME *
* BE IN THE JCL *
* *
************************************************************************

TRACE YES
TRACEPL YES
TRACESAF YES
TRACEMOD NO

If TRACE is set to YES, then the security trace is enabled.
TRACEPL reports trace on parameter list.
TRACE SAF reports trace on SAF call (i.e : RACROUTE).
TRACEMOD reports trace on security exit module flow (on request by CA Support )

 

When TRACE statement is set to NO, then all TRACExx options are disabled.

The SXTRACE requires a DDNAME specifying the output of the trace and also requires SXCTL DDNAME to indicate where the SXPARMS member is located.

 

Example :

 

RUNSYSIN

 

SXCTL     DD  DSN=hlq.PARMLIB(SXPARMS)

SXTRACE DD  SYSOUT=*