We've recorded logons with the following.
But we haven't done logoffs. The problem with logoffs has been
that you only get clean terminations. The aborted sessions just
disappear (they are recorded in the system logfiles).
SYSUDC system wide udc
1 SYSLOGON
2 OPTION LOGON, NOBREAK
3
4 SETVAR _TLSACT FINFO ( "!HPFILE", "ACCOUNT" )
5 SETVAR _TLSGRP FINFO ( "!HPFILE", "GROUP" ) + ".!_TLSACT"
6
7 IF FINFO ( "SYSSEC.!_TLSGRP", "EXISTS" ) THEN
8 CONTINUE
9 XEQ SYSSEC.!_TLSGRP
10 ENDIF
11 IF FINFO ( "SYSCMD.!_TLSGRP", "EXISTS" ) THEN
12 CONTINUE
13 XEQ SYSCMD.!_TLSGRP
14 ENDIF
15 ********************
SYSSEC command file
1 # SYSSEC Keven Miller, eXegeSys, Inc
2
3 IF "!HPJOBTYPE" = "S" THEN
4 IF NOT BOUND ( HPREMIPADDR ) THEN
5 IF BOUND ( HPSTDIN_NETWORK_ADDR ) THEN
6 SETVAR HPREMIPADDR HPSTDIN_NETWORK_ADDR
7 ELSE
8 SETVAR HPREMIPADDR ""
9 ENDIF
10 ENDIF
11 IF NOT BOUND ( HPSTDIN_NETWORK_NODE ) THEN
12 SETVAR HPSTDIN_NETWORK_NODE ""
13 ENDIF
14
15 FILE TERMLOG=TERMLOG.LOG.XSI,OLD
16 SETJCW SECURITYJCW=0
17 SETJCW BATCHJCW=0
18 SETVAR TERMUSR LFT("!HPUSER ",8)+LFT(".!HPACCOUNT",9)
19 SETVAR TERMIP LFT("!HPREMIPADDR"+RPT(" ",15),16)+&
20 LFT(" !HPSTDIN_NETWORK_NODE"+RPT(" ",15),16)
21 SETVAR TERMTS "!HPYYYY"+RHT("0!HPMONTH",2)+RHT("0!HPDATE",2)+&
22 RHT("0!HPHOUR",2)+RHT("0!HPMINUTE",2)
23
24 IF FINFO ( "!HPACCOUNT.SEC.XSI", "EXISTS" ) THEN
25 ECHO Access Allowed
26 CONTINUE
27 ECHO !TERMTS !TERMUSR !TERMIP !SECURITYJCW Allow >>*TERMLOG
28
29 ELSEIF HPREMIPADDR = "127.0.0.1" THEN
30 ECHO LoopBack
31 CONTINUE
32 ECHO !TERMTS !TERMUSR !TERMIP !SECURITYJCW Loop >>*TERMLOG
33
34 ELSEIF HPLDEVIN = 20 THEN
35 ECHO Console
36 CONTINUE
37 ECHO !TERMTS !TERMUSR !TERMIP !SECURITYJCW Console >>*TERMLOG
38
39 ELSE
39.1 #extra system security program
40 CONTINUE
41 TERMPASS.PUB.XSI ;INFO="!HPLOCIPADDR"
42 SETVAR TERMTS "!HPYYYY"+RHT("0!HPMONTH",2)+RHT("0!HPDATE",2)+&
43 RHT("0!HPHOUR",2)+RHT("0!HPMINUTE",2)
44 CONTINUE
45 ECHO !TERMTS !TERMUSR !TERMIP !SECURITYJCW >>*TERMLOG
46 IF SECURITYJCW = 0 THEN
47 BYE
48 ENDIF
49 ENDIF
50
51 DELETEVAR SECURITYJCW,TERMUSR,TERMIP,TERMTS
52 RESET TERMLOG
53 ELSE
54 SETJCW BATCHJCW=1
55 ENDIF
TERMLOG.LOG.XSI logfile
200109270912 MGR .DEVMOM 192.168.2.62 HOME_LINDAT..OR 2
200110220513 KEVEN .PMDEV 127.0.0.1 RADON.EXEGESYS. 0 Loop
200110220900 KEVEN .MNTDEV 192.168.2.237 KEVEN.DOMAIN.OR 1
200110220901 MGR .MNTDEV 192.168.2.237 KEVEN.DOMAIN.OR 1
200110230403 MGR .XSI 192.168.2.61 KEVEN_HOME.DOMA 2
200110241626 MGR .MNTTEST 192.168.2.237 KEVEN.DOMAIN.OR 0
200110241627 MGR .MNTTEST 192.168.2.237 KEVEN.DOMAIN.OR 2
200110250540 KEVEN .PMDEV 127.0.0.1 RADON.EXEGESYS. 0 Loop
200110250911 KEVEN .PMDEV 192.168.2.237 KEVEN.DOMAIN.OR 1
200110251400 MGR .SURVIVAL 192.168.2.92 RD_LORIC..ORG 0 Allow
200110260135 MGR .XSI 192.168.2.59 KEVEN_HOME.DOMA 2
200110260136 KEVEN .PMDEV 127.0.0.1 RADON.EXEGESYS. 0 Loop
ACCOUNT: XSI access=(R,W,A,L,X:ANY)
GROUP: LOG access=(R,W,A,L,X:ANY;S:AC)
Keven [log in to unmask]
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
|