TSSUTIL EXTRACT EVENT(VIOL) Places N/A In Top Secret Department If The ACID Is SUSPENDED
book
Article ID: 71567
calendar_today
Updated On:
Products
Top SecretTop Secret - LDAP
Issue/Introduction
When running TSSUTIL EXTRACT with EVENT(VIOL) and EARLOUT, a type USER ACID that is SUSPENDED has their department listed as N/A. This output is part of a multi-step process to generate a report for violations listing using EARL, so the department that is listed in the Top Secret database needs to be displayed for these suspended acids.
Environment
Z/OS
Resolution
On a signon, if an acid is suspended for what ever the reason (ASUSPEN, PSUSPEND, XSUSPEND, etc), Top Secret does NOT build a complete ACEE and thus it does not contain information such as DEPTNAME, DIVNAME and ZONENAME. So when the event is logged, that information is not available to be logged to the audit tracking or the SMF files. That is the reason why N/A shows under the DEPTNAME for acids that are SUSPENDed.