Log Passthrough session on OS400/AS400?

Hi Ainselyb,

Do you really want to do a 'passthrough' or you just want to connect to another system ?
Cause you can do a Telnet by example... This require not much... Just the IP address (and connection between the 2 systems).

But, if you really want to do passthrough and if I remember right, you must create those things in both systems you want to connect (and the network should be opened to let the traffic goes if it's outside of your company):

1-Distribution queue:
ADDDSTQ    DSTQ(&DSTQ) RMTLOCNAME(&RMTNAME)  DSTQTYPE(*SNADS)
2-Distribution route:
ADDDSTRTE  SYSNAME(&RMTCIE) FAST(&DSTQ) STATUS(&DSTQ) DATAHIGH(&DSTQ) DATALOW(&DSTQ)
3-Directory entry:
ADDDIRE USRID(*ANY &RMTNAME) USRD('SNADS user') SYSNAME(&RMTNAME)

PS To do a passthrough, the command is STRPASTHR RMTLOCNAME(&RMTNAME).
PPS For tracking, they must have a user and password. And you can see them with wrkactjob as any other users.

Lewis

Hi Ainselyb,

1) You should be command auditing these users.
Log their commands to the audit journal:
CHGUSRAUD USRPRF(profile)  AUDLVL(*CMD)    
Display the entries:
DSPAUDJRNE ENTTYP(CD)  USRPRF(profile)
If this is what you need, there are more details on setting up auditing here:
http://www-912.ibm.com/s_dir/slkbase.nsf/1ac66549a21402188625680b0002037e/a6254a668067bf0f862566f10077a850?OpenDocument

2) You could alter their initial program or use an exit program to track when they sign on. This could log that fact, or be used to alert you.

As an aside, be very careful if they are using SNA passthru to connect to your system. One time, I had a vendor passed thru to a customers system, I passed thru back to the vendor system, and guessed a password. I then saw another customer connected to the vendor system, and was able to pass thru to that customer's system. The vendor used the same password on that customer system as on my customer's system, so I was able to sign on. In short, customers could see each other's data. I immediately reported that problem to the vendor to have it fixed.

Hope this helps
Barry