This category includes the following APIs:

Auditing - NetAuditClear
Auditing - NetAuditRead
Auditing - NetAuditWrite

Auditing APIs control the audit log file, which contains an audit trail of operations that occur on a server. These functions are used with the AUDIT.H and NETCONS.H header files.

Each time a user or application connects to or disconnects from resources on a server, an audit entry can be generated to record the connection or disconnection. Audit entries are stored in an ASCIIZ file. The default audit log file is \IBMLAN\LOGS\NET.AUD. All of the auditing functions perform their operations on this file.

Note: The auditing functions only control changing the contents of the audit log file. To read the audit log file, an application first must call the NetAuditRead API to get the handle of the file. The DosRead API then can be called to read the file. To close the file, an application must call the DosClose API.

LAN Server provides for the following types of audit entries:

• A change in the status of a server 
  The beginning of a session
  
  The end of a session
  
  A password error
  
  The start of a connection
  
  A disconnection
  
  A rejected connection request
  
  An access made to a resource
  
  The rejection of an access
  
  The closing of a file, device, or pipe
  
  A change to a service status code or text
  
  A change to an access control profile
  
  A change to the UAS database
  
  The logon of a user
  
  The logoff of a user
  
  The denial of a logon
  
  The limit of an account exceeded

  Applications can create additional types of audit entries with the NetAuditWrite API. The other two auditing APIs open (NetAuditRead) and clear (NetAuditClear) the audit log file.

  Directory and Security Server Only

  The DSS Security and Time servers use audit services provided by DCE. To access the audit trails, you must use the DCE dce_and RPCs rather than the NetAudit APIs.

  Also see the IBM Directory and Security Server Administrator's Guide for more information about changes in auditing on DSS.

  ---

  [Back] [Next]