XAC: How to configure XAC TACLs for static SSH windows

XAC: How to configure XAC TACLs for static SSH windows

  1. Add a static service via the SSH STNCOM utility

             Example:

       STNCOM $<process name>           (Where $<process name> is the name of a valid STN process,                                                                         e.g. $ZPTY
       ADD SERVICE AUDTACL, TYPE STATIC

        2. The service added in step #1 will need several static windows assigned to it.  The number of static
            windows configured is determined by your requirements.  You must be in STNCOM to add the static   
            windows.  From STNCOM:

            Example:

            ADD WINDOW #AUDTRM1, SERVICE AUDTACL,TYPE STATIC
            ADD WINDOW #AUDTRM2, SERVICE AUDTACL, TYPE STATIC
            .
            .
            .
            ADD WINDOW #AUDTRM9, SERVICE AUDTACL,TYPE STATIC
 
       3. Configure an XAC TACL command in the ACACL file similar to the following:

            COMMAND TACL-STATIC-IP                !
                !This command is designed to be used as the standard startup for TACLs
                !attached to a static IP port.
                !
                DESCRIPTION "Keystroke audited TACL"
                USER 255,255                                            !The user must log on
                ACL $EVERYONE
                OBJECT $SYSTEM.SYSNN.TACL                !TACL is the program
                START_LOGGED_OFF                                !The user must enter userid/alias and
                                                                                     !password
                ALIAS_ALL_PROCESSES                            !Extend the ALIAS to all subordinate
                                                                                     !programs
                ALIAS "O " "<<OBEY "                              !Replace all of the following commands
                ALIAS "OBEY " "<<OBEY "                       !with references to XYGATE/AC'S
                ALIAS "O$" "<<OBEY $"                           !internal <<OBEY command which audits
                ALIAS "O\" "<<OBEY \"                           !all activity.
                RESTART                                                     !When log off occurs, stop
                EXECUTEHANGUP                                      !If you get a HANGUP command for the
                                                                                    !application, then stop
                CHECKCONNECTION 1000 250                !After 10 seconds of no communications
                                                                                    !line activity, wait for 2.5 seconds for
                                                                                    !recovery.  If no recovery, stop.
                STOPONERROR 60,66,140,190,191        !If one of these errors occurs,
                                                                                    !terminate the session.
                 DONOTSTOP $*.*.PATHTCP2                  !Do not stop Pathway TCPs
                 BLANKPASSWORD                                    !If PASSWORD is entered, replace the
                                                                                     !next word with 8 pound signs in the
                                                                                     !audit file
                 TRACKVOLUME                                          !If V or VOLUME is used to change
                                                                                     !the volume, change XYGATE/AC'S internal
                                                                                     !volume used for <<OBEY
                 TRACKUSERID                                           !Use the user's userid for all calls
                                                                                     !to SETMODE (such as FILE OPENs)
                  FC                                                               !Use simple FC
                  FCPROMPT "> "                                        !FC is valid at a prompt ending in this
                  OPENSBYOBJECTS \*.$*.*.*                  !Allow all subordinate programs
                  TIMEOUT 1800                                         !Terminate after 30 minutes of inactivity
                  INPUT "LOAD/KEEP 1/$SYSTEM.XYGATEAC.LOADXOA"  !Causes XYGATE/AC's XOA access
                                                                                                                  !macro to be loaded with each TACL
                  INPUT "sink [#history/reset/]"              !Reset the FC buffer
                  ALIAS_XYGATEAC_PROCESSES   OFF

    4.   Start XAC TACLs on the windows configured in step #2.
 
   XAC <XAC TACL command> /IN <window>, OUT <window>, TERM <window>, name $<name>, NOWAIT/

            Where  <XAC TACL command> is a valid XAC command for TACL configured in the ACACL file. In the above example,
                                                          that would be TACL-STATIC-IP.
                       <window> is the STN process and a unique window name, e.g. $ZPTY.#WINDOW1
                       $<name>  is a unique process name for the XAC TACL, e.g. $TCL1

                This step must be repeated for each window configured.

       Example:


    XAC TACL-STATIC-IP/ /IN $ZPTY.#AUDTRM1, OUT $ZPTY.#AUDTRM1, TERM $ZPTY.#AUDTRM1, name $AUD1, NOWAIT/


If you are unable to locate the solution needed or if you need additional assistance please Click Here to open a case from our Customer Care Portal.

    • Related Articles

    • XAC: How to configure keystroke auditing for TACL SSH sessions

      Use the following steps to configure XAC auditing for SSH. Add the XAC command. The XAC command requires the following keywords to be included. USER_IGNORED START_LOGGED_ON USER_SWITCH SAFEGUARD_PRIVLOGON Note: If XYGATE User Authentication (XUA) is ...

    • XAC: How to configure keystroke auditing for OSS SSH sessions

      Use the following steps to configure XAC auditing for SSH. Add the XAC command. The XAC command requires the following keywords to be included. USER_IGNORED START_LOGGED_ON USER_SWITCH SAFEGUARD_PRIVLOGON Note: If XYGATE User Authentication (XUA) is ...

    • How to make XAC work with NSDEE

      XAC 6.25 or higher is required for XAC and NSDEE. This is because the NSDEEREG file is included with this version and is required for NSDEE support when telnet or SSH is configured to use XAC. To configure NSDEE with XAC is installed, proceed as ...

    • XAC: Example of initiating an XAC command to run EMSDIST on TELSERV or STN service

      If XAC TACL is configured with the TIMEOUT entry and EMSDIST is running on it, but there are no EMS messages during the TIMEOUT period, then XAC will terminate TACL and the EMSDIST. Below are examples of initiating an XAC command to print EMS ...

    • XYPRO?s GUI product Windows Compatibility Matrix

      XYPRO Windows Client Applications are supported on, and compatible with most Microsoft-supported operating systems. Product Name Product Code Win10 Win11 Server 2008 Server 2012 R2 Server 2019 XYGATE Configuration Manager P66 XCF ü ü ü ü ü XYGATE ...