XAC: How to configure keystroke auditing for OSS SSH sessions

XAC: How to configure keystroke auditing for OSS SSH sessions

Use the following steps to configure XAC auditing for SSH.

Add the XAC command.

The XAC command requires the following keywords to be included.

USER_IGNORED 
START_LOGGED_ON
USER_SWITCH SAFEGUARD_PRIVLOGON  

Note: If XYGATE User Authentication (XUA) is running on the NonStop server, it will need a UAGROUP definition in the UAACL 
Use: XUA: How to enable safeguard-privlogon.

Example:

COMMAND AUDITED-OSS-SSH-SHELL
       DESCRIPTION "OSS keystroke audited"
        USER_SWITCH SAFEGUARD_PRIVLOGON
        USER GROUP,USER
        USER_IGNORED
        OBJECT $SYSTEM.XYGATEAC.XYGATEOA
        ACL $EVERYONE
        OPENSBYOBJECTS \*.$*.*.*
        START_LOGGED_ON
        STARTUP "-xac"
        STOPONERROR 60,66,140,190,191

Add Safecom DISKFILE record

Use: XAC: How to add SAFEGUARD_PRIVLOGON for a XAC command.


Add the SSH service and set ELP_OBJECT

Example:

TACL> RUN $SYSTEM.ZSSH.STNCOM $ZPTY
% ADD SERVICE OSSAUD, TYPE DYNAMIC, PROG $SYSTEM.XYGATEAC.XYGATEAC, &
PARAM "AUDITED-OSS-SSH-SHELL", LOGON REQ, MENU HIDDEN
% START SERVICE OSSAUD
%ELP_OBJECT ELP


Add or alter the SSH user.

TACL> RUN $SYSTEM.ZSSH.SSHCOM $SSH00

% ADD USER SYSTEM.OPERATOR,SHELL-PROGRAM *MENU* OSSAUD FORCE
or
% ALTER USER SYSTEM.OPERATOR,SHELL-PROGRAM *MENU* OSSAUD FORCE

If this article did not provide a solution, please open a case with our support team by sending an email message to support@xypro.com.
 





    • Related Articles

    • XAC: How to configure keystroke auditing for TACL SSH sessions

      Use the following steps to configure XAC auditing for SSH. Add the XAC command. The XAC command requires the following keywords to be included. USER_IGNORED START_LOGGED_ON USER_SWITCH SAFEGUARD_PRIVLOGON Note: If XYGATE User Authentication (XUA) is ...

    • XAC: How to configure XAC TACLs for static SSH windows

      Add a static service via the SSH STNCOM utility Example: STNCOM $<process name> (Where $<process name> is the name of a valid STN process, e.g. $ZPTY ADD SERVICE AUDTACL, TYPE STATIC 2. The service added in step #1 will need several static windows ...

    • XAC: Non-SSH TACL Sessions Timing Out

      Check the Timeout Value setting for the telserv process: 1. SCF 2. INFO PROCESS $<telserv process>, DETAIL (where $<telserv process> is the telserv process that started the session, e.g. $ZTN0) Example: 3-> info process $ztn0,detail TELSERV Detailed ...

    • How to make XAC work with NSDEE

      XAC 6.25 or higher is required for XAC and NSDEE. This is because the NSDEEREG file is included with this version and is required for NSDEE support when telnet or SSH is configured to use XAC. To configure NSDEE with XAC is installed, proceed as ...

    • XAC: OSH (OSS) vi command requires user to press enter multiple times

      A formal fix has been released by HPE. SPR T0801H01 ACQ (May 2019) L-series Fix: T0801L01 ACT - Releasing soon SYMPTOMS: STN (pseudo-TTY): Application output (sometimes including echo of input) is "stuck", not appearing until the next keyboard input. ...