z/VM: CP Commands and Utilities Reference - z/VM - IBM

SET JOURNAL
SET JOURNAL
►►
Set
Authorization
Purpose
JOurnal
Operands
Usage Notes
Messages
LOgon
LInk
ON
OFF
Privilege Class: A
1266 z/VM: CP Commands and Utilities Reference
Use SET JOURNAL to start or stop the journal security function.
LOgon ON
LOgon OFF
indicates whether the LOGON, AUTOLOG, and XAUTOLOG thresholds
established in the SYSJRL macro or in the system configuartion file with
JOURNALing FACility ON at system generation are observed. The default is
ON.
LInk ON
LInk OFF
indicates whether type 05, 06 and 08 accounting records are generated and
messages are sent to operations personnel when the LINK thresholds whether
established in the SYSJRL macro or in the system configuartion file with
JOURNALing FACility ON at system generation are violated. The default is ON.
1. The SET JOURNAL command can be used only if the SET_AND_QUERY ON
operand is specified on the JOURNALING statement in the system configuration
file.
2. SET JOURNAL LINK OFF changes to 10 the limit for incorrect password LINK
attempts that a particular user can enter.
3. SET JOURNAL LOGON OFF disables the logon inductor and discards the count
of logon attempts associated with terminals and user IDs that are not logged on
at the time. If SET JOURNAL LOGON ON is then issued, no information about
previous logon attempts is available.
Note: The logon inductor is the CP facility that responds to excessive logon
attempts with a bad password. It temporarily prohibits a terminal or user
ID from logging on.
4. Users who exceed the AUTOLOG/XAUTOLOG not-valid-password limit and are
not permitted to use these commands for the remainder of their logon session,
have their ability to use these commands restored after SET JOURNAL LOGON
OFF is issued. If SET JOURNAL LOGON ON is issued later, these users again
are unable to enter AUTOLOG or XAUTOLOG. Refer to Usage Note 5 on page
1205 in SET CMDLIMIT for details on what will happen when SET JOURNAL
LOGON OFF is issued for invalid password attempts.
►◄