XAC: Non-SSH TACL Sessions Timing Out
Check the Timeout Value setting for the telserv process:
1. SCF
2. INFO PROCESS $<telserv process>, DETAIL (where $<telserv process> is the telserv process that started the session, e.g. $ZTN0)
Example:
3-> info process $ztn0,detail
TELSERV Detailed Info PROCESS \CHICAGO.$ZTN0
PCPU................... 1 BCPU................... 0
PPIN................... 467 BPIN................... 495
TACL................... ON Transport Process..... $ZTC0
*Menu................... ON Transport Type......... TCP/IP
*Timeout Value.......... N/A Port................... 23
*Banner Timeout Value... N/A Total Services......... 3
*Max Terminals.......... 512 Total Terminals........ 11
Program................ \CHICAGO.$SYSTEM.SYS07.TELSERV
*CPU List............... 0 ,1 ,2 ,3 ,4 ,5 ,6 ,7 ,8 ,9 ,10 ,11 ,12 ,13
,14 ,15
*DROPCR................. OFF
To avoid sessions timing out due to the telserv process Timeout Value setting, any value other than "N/A" in this field should be cleared:
1. SCF
2. ALTER PROCESS $<telserv Process>, TIMEOUTVALUE 32767
This will set the field value to "N/A"
Setting the process to a value of 32767 specified "infinite" or in effect, no timeout value. IT IS IMPORTANT THAT 32767 BE SPECIFIED. One digit less, e.g 32766 and the exact value of 32766 minutes will be configured.
If this article did not provide a solution, please open a case with our support team by sending an email message to support@xypro.com.
Related Articles
XAC: How to configure keystroke auditing for TACL SSH sessions
Use the following steps to configure XAC auditing for SSH. Add the XAC command. The XAC command requires the following keywords to be included. USER_IGNORED START_LOGGED_ON USER_SWITCH SAFEGUARD_PRIVLOGON Note: If XYGATE User Authentication (XUA) is ...
XAC: How to configure keystroke auditing for OSS SSH sessions
Use the following steps to configure XAC auditing for SSH. Add the XAC command. The XAC command requires the following keywords to be included. USER_IGNORED START_LOGGED_ON USER_SWITCH SAFEGUARD_PRIVLOGON Note: If XYGATE User Authentication (XUA) is ...
XAC: Hanging XAC TACL session filling audit logs
The STOPONERROR command should be added to the ACACL for commands that spawn TACL sessions. The default STOPONERROR command is: STOPONERROR 60,66,140,190,191 This handles the most common scenarios that would leave hanging sessions but, more can be ...
XAC: How to configure XAC TACLs for static SSH windows
Add a static service via the SSH STNCOM utility Example: STNCOM $<process name> (Where $<process name> is the name of a valid STN process, e.g. $ZPTY ADD SERVICE AUDTACL, TYPE STATIC 2. The service added in step #1 will need several static windows ...
How to make XAC work with NSDEE
XAC 6.25 or higher is required for XAC and NSDEE. This is because the NSDEEREG file is included with this version and is required for NSDEE support when telnet or SSH is configured to use XAC. To configure NSDEE with XAC is installed, proceed as ...