TSSUTIL EXTRACT EVENT(VIOL) Places N/A In Top Secret Department If The ACID Is SUSPENDED

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

When running TSSUTIL EXTRACT with EVENT(VIOL) and EARLOUT, a type USER ACID that is SUSPENDED has their department listed as N/A. This output is part of a multi-step process to generate a report for violations listing using EARL, so the department that is listed in the Top Secret database needs to be displayed for these suspended acids.

Environment

Z/OS

Resolution

On a signon, if an acid is suspended for what ever the reason (ASUSPEN, PSUSPEND, XSUSPEND, etc), Top Secret does NOT build a complete ACEE and thus it does not contain information such as DEPTNAME, DIVNAME and ZONENAME. So when the event is logged, that information is not available to be logged to the audit tracking or the SMF files. That is the reason why N/A shows under the DEPTNAME for acids that are SUSPENDed.