Re: Login History

"Ronald Sposito" <[email protected]> Fri, 20 Apr 2007 12:34:35 -0400
Newsgroups gmane.comp.systems.as400.security
Message-ID <[email protected]>
I analyze msgid CPF1124 for start of  session, cpf1164 and cpf5140 for
end of session.. 

Ron Sposito
SLomin's Inc


                        
                        




This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. This email message does not constitute a legal and binding agreement unless signed and authorized by an executive of the company. If you have received this email in error, please contact our email administrator directly by sending an email to [email protected]
 

From: security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected]
[mailto:security400-bounces-Zwy7GipZuJhWk0Htik3J/[email protected]] On Behalf Of Terrence Enger
Sent: Friday, April 20, 2007 12:28 PM
To: Security Administration on the AS400 / iSeries
Subject: Re: [Security400] Login History

Kit,

DSPLOG gives you first step toward the answer.  Select MSGIDs for job
started and ended.  Start way back, and jobs started before the certain
time and ended after the certain time (including not ended yet) were in
some sense active at the certain time.

I am sorry, but I do not have the message ids at the tip of my fingers.

HTH,
Terry.


At 12:08 2007-04-20 -0400, you wrote:
>We have an issue were we to see who was connected to the system at a
certain
>time range. I've looked through the auditing features but most of them
seem
>to log things such as login failures vs. being able to tell me who was
on,
>when, for how long, from what IP, etc. How can I get this data?
>
>Thanks, Kit


_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.

_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) mailing list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.