Frage

An IFS access is being rejected, but there is no protocoll data.

Antwort

Basically the values for logging ( 5. user site) have to be checked.

There are two fields for logging of IFS accesses on the 5. user site.

IFS-directories.: Netserver-accesses . . . . . . . . . . . . . . . . . . . 012 2
IFS-directories.: Netserver EXTRACT-operations . . . . . . . . . 012 2

PLOGF: Information about directory accesses
0 = No logging will be performed
1 = All accesses will be logged.
2 = Only rejected accesses will be logged.

PLOGE: Logging of EXTRACT and ALLOCATE accesses
0 = No accesses will be logged
1 = All accesses will be logged .
2 = All rejected accesses will be logged.

No accesses wil be logged if one of the values has a 0.
Basically both fields are independently of each other. But they do have a dependence of the control fields of IFS on the 1. user page.

If both logging values (page 5) equal value 2 and the IFS control (page 1) is not activated (equals values 1), but the EXTRACT accesses equals value 2, no logging entries will be produced because no entries will be rejected.

If IFS control (page 1) equals value 1 and the EXTRACT control equals value 2, the EXTRACT control is not active. The EXTRACT control is active only if the IFS control equals value 2. If IFS logging fields (page 5) equal value 1 and EXTRACT equals 2, no EXTRACT records will be logged, because control is not activated.

back to top

Integrated file system IFS (Explorer and NetServer)
IFS..........: PC-files all IFS-file systems. . . . . . . . . . . . . . . . . . . . 012 2
IFS..........: Access to IFS file system QSYS.LIB from PC . . . . 012 0

IFS..........: Checking of Extract accesses . . . . . . . . . . . . . . . . . .01 0

The logging field for Netserver accesses is dependent on the first two control fields on page 1 and the logging field for EXTRACT accesses is dependent on the control field for EXTRACT accesses.

Typical errors when IFS and EXTRACT control field are activated:

No data is being recorded because both control fields for logging equals value 0.

Even though the control field for logging of EXTRACT accesses equals value 0, EXTRACT accesses are being controlled.

The accesses on the PC side will be blocked but there are no records in the logfile.

Solution 1 : The logging of EXTRACT accesses should be switched to 2.

Solution 2 : renounce the control of EXCTRACT accesses, switch the control value to 2.

You will have no lost of security because EXTRACT accesses are only checking if there is an IFS object (Directory or streaming file) existing. More than 95% of all data going through an Exit program are EXTRACT accesses. Now the performance is better and the logfile will be smaller.

 back to top