CA Top Secret - TSSAUDIT Output - z/OS



All about SAF, RACF, encryption, Firewall, Risk assessment and integrity concepts

CA Top Secret - TSSAUDIT Output - z/OS

Postby jayarc » Fri Sep 11, 2009 11:13 pm

Hi All,

I apologize for not introducing myself in a separate post, but I have a question that is killing me! I am new to mainframes as we can all assume, and I am trying to integrate some security event logging software.

The software reads a file containing the output of the TSSAUDIT program, here in an sample of a file:

1ETRUST CA-TOP SECRET VERSION 12.0                          AUDIT UTILITY                          24/07/09   08:43:23       PAGE 001
+                                                           _____________




0 INCOMING PARAMETER ===>        CHANGES   DATE(-01)
1ETRUST CA-TOP SECRET VERSION 12.0                          AUDIT UTILITY                          24/07/09   08:43:23       PAGE 002
+                                                           _____________
-                                          ----- LISTING OF CHANGES TO SECURITY FILE -----
-CHANGER    DATE     TIME   SYSID TYPE                      COMMAND/IMAGE
 ======== ======== ======== ===== ==== ==============================================================================================

0GODGOD1  23/07/09 00:02:13 HVNN  PW   TSS REP(1193011 ) PASSWORD(????????)
 JESUS01  23/07/09 00:44:03 HVNN  CMND TSS ADD(1170275)PASS(?,,E)
 JESUS01  23/07/09 00:44:03 HVNN  CMND TSS ADD(1170276)PASS(?,,E)
 JESUS01  23/07/09 00:44:05 HVNN  CMND TSS ADD(1170277)PASS(?,,E)
 JESUS01  23/07/09 00:44:05 HVNN  CMND TSS ADD(1170278)PASS(?,,E)


Everything is working fine reading this file with the whole days changes! But, I am just looking for a way to automatically create this file every 5 or 10 minutes with only the changes that happened in that time. Can somebody explain to me how I would accomplish this on z/OS? JCL?

I have attached the guide for the TSSAUDIT program from CA. Keep in mind I am a complete newb and will be working remotely at best with mainframe operators to get this to work.

Thanks,

-Jay
jayarc
 
Posts: 2
Joined: Fri Sep 11, 2009 10:49 pm
Has thanked: 0 time
Been thanked: 0 time

Re: CA Top Secret - TSSAUDIT Output - z/OS

 

Re: CA Top Secret - TSSAUDIT Output - z/OS

Postby dick scherrer » Sat Sep 12, 2009 1:06 am

Hello Jay and welcome to the forum,

First - do not post copyright material. We may neither post nor link to copyright material on our forum. The attached manual has been deleted.

Suggest you open an issue with CA support and they can tell you if this is possible and if it is, how to do it.
Hope this helps,
d.sch.
User avatar
dick scherrer
Global moderator
 
Posts: 6304
Joined: Sat Jun 09, 2007 8:58 am
Has thanked: 3 times
Been thanked: 91 times

Re: CA Top Secret - TSSAUDIT Output - z/OS

Postby jayarc » Sat Sep 12, 2009 1:21 am

Sir,

If I wanted to contact CA for support, I would have done it. My intention was to get a concise and timely answer from an expert in the field, providing publicly available documentation as a reference. But, it looks like I'm in the wrong place for help. Your post and subsequently your forum has provided absolutely nothing of value to me.

This is the worst topic forum I've ever come across. It simply confirmed the stereotype that mainframe guru's are stodgy old ogres that are scared their dying art is at risk of being leaned by someone with substantially more mental acuity. You are part of the reason why Windows has become the predominant OS in the enterprise, even though it was the worst OS for 20 years. Why waste time trying to learn mainframes from people who don't care to teach, when you can install Windows Servers on your laptop at home.

Thanks for taking time to reply. Please, go ahead and delete this whole thread as well as my account, I will not be returning to your pleasant forum.

-Jay
jayarc
 
Posts: 2
Joined: Fri Sep 11, 2009 10:49 pm
Has thanked: 0 time
Been thanked: 0 time

Re: CA Top Secret - TSSAUDIT Output - z/OS

Postby dick scherrer » Sat Sep 12, 2009 1:51 am

Hello,

Suggest you would have been better served if you had taken time to notice this forum is for students and beginners. You appear to be neither. . . unless you are simply a well-spoken ignoramus. Lots of people who have nothing to offer are able to say it well. . .

My intention was to get a concise and timely answer from an expert in the field, providing publicly available documentation as a reference
Was it available publically from CA? If not, it was stolen and should not have been posted.

I suggest it is not stodgy to be against theft. . . You might disagree. . . which would not be a surprise.

scared their dying art is at risk of being leaned by someone with substantially more mental acuity
If mental acuity was considered in sporting terms, you couldn't ride our bench. Indeed, if mental acuity were considered in sporting terms, you could not suit up for the junior varsity. If your mental acuity is your long suit, your career will be a very lonely place. Those who might not be as gifted as you will find you unbearable. Those of us who are most likely far more gifted will not tolerate your tantrums.

I will not be returning to your pleasant forum.
With your attitude, you won't be missed. Everyone makes the forum better. Some when they join and contribute. Others when they leave. . .
Hope this helps,
d.sch.
User avatar
dick scherrer
Global moderator
 
Posts: 6304
Joined: Sat Jun 09, 2007 8:58 am
Has thanked: 3 times
Been thanked: 91 times


Return to Mainframe Security

 


  • Related topics
    Replies
    Views
    Last post