Auditing the Adabas System Coordinator Configuration, Security, and Natural Files

#### Search Results

Search

# Auditing the Adabas System Coordinator Configuration, Security, and Natural Files

This section covers auditing the Adabas System Coordinator (COR) configuration files, which enables auditing of configuration changes for Adabas Fastpath, Adabas Vista, and Adabas SAF Security.

This section also includes auditing the Security (SEC) and Natural (NAT) files.

- Prerequisites

- Adabas Nucleus

- SYSALA - Define a New Subscription

- Configuration File Record Types

## Prerequisites

- Load System Definitions

- ADAFRM ALOGFRM DEVICE=

### Load System Definitions

Auditing the Adabas System Coordinator configuration, Security, or Natural file requires loading additional system definitions using the `EZAUDLOD` utility. See Installation for z/OS > Complete the Loading of the Audit File Initial Definitions in the Installation documentation.

### ADAFRM ALOGFRM DEVICE=

When using ADAFRM ALOGFRM to format audit logs (ALOGs), the required blocksize differs depending on the file type.

For COR or SEC for LOGONERR, LOGONREC (logon errors, logon records), the required blocksize must be 8904 or higher, so the recommendation is to use DEVICE=8390. An example for DEVICE=8390 is as follows:

Device | Trks/Cyl | ASSO | DATA | WORK | PLOG/RLOG | CLOG/ALOG | TEMP/SORT/DSIM | Notes
--- | --- | --- | --- | --- | --- | --- | --- | ---
8390 | 15 | 3440:14 | 6518:8 | 10706:5 | 10706:5 | 8904:6 | 8904:6 | 1

For other SEC items, the minimum requirement is to use DEVICE=8392. An example for DEVICE=8392 is as follows:

Device | Trks/Cyl | ASSO | DATA | WORK | PLOG/RLOG | CLOG/ALOG | TEMP/SORT/DSIM | Notes
--- | --- | --- | --- | --- | --- | --- | --- | ---
8392 | 15 | 4092:12 | 12796:4 | 18452:3 | 18452:3 | 18452:3 | 18452:3 | 1

For NAT, the minimum requirement is to use DEVICE=3390. An example for DEVICE=3390 is as follows:

Device | Trks/Cyl | ASSO | DATA | WORK | PLOG/RLOG | CLOG/ALOG | TEMP/SORT/DSIM | Notes
--- | --- | --- | --- | --- | --- | --- | --- | ---
3390 | 15 | 2544:18 | 5064:10 | 5724:9 | 5724:9 | 5064:10 | 8904:6 | 1

For other devices, refer to DBA Reference Summary > Adabas Device Types and Block Sizes in the Adabas documentation, particularly the CLOG/ALOG column.

## Adabas Nucleus

- Auditing Parameters

- Assign Audit Name

### Auditing Parameters

Auditing the Adabas System Coordinator configuration file does not require any special ADAANP nucleus parameter settings. Configure auditing as follows:

- Configure global auditing parameters as usual to connect to the appropriate audit server ID.

- Define file auditing parameters for the required file or range of files, including the Adabas System Coordinator configuration, Security, and/or Natural files.

- Configure database auditing parameters as usual to control the collection of auditing data.

For more information, see Adabas Nucleus Auditing Parameters (ADAANP).

### Assign Audit Name

An Audit Name must be assigned to the Adabas System Coordinator configuration, Security, or Natural file in order for it to be eligible for auditing. The utility `ADADBS MODFCB AUDITNM=` is used for this. See also ADADBS MODFCB AUDITNM=.

## SYSALA - Define a New Subscription

- For Adabas System Coordinator (COR)

- For Security (SEC)

- For Natural (NAT)

### For Adabas System Coordinator (COR)

From the SYSALA Main Menu, choose option `S` to modify the Subscription Definitions:

    19:36:20        ***** A D A B A S  AUDITING CONFIGURATION *****      2025-08-14
    Vers 2.3.1                        Main Menu                          M-RP0010
    DBID 11956 File 89

                      Code    Function
                      ----    ------------------------------
                        D     Destination Definitions
                        F     Filter Definitions
                        G     File Schema Definitions
                        S     Subscription Definitions
                        T     Admin Subscription Definitions
                        V     Global Definitions
                        U     Set Lfile parameters
                        ?     Help
                        .     Exit
                      ----    ------------------------------
               Code ... _

    Command ==>
    Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12---
          Help        Exit                                                  Exit

On the subsequent screen, use PF4 to add a new subscription. Fill in the subscription name, ID and description and set a Destination. See Adding Subscription Definitions for more details.

Select the File-related parameters sub-section, then use PF4 to add file-related parameters for the Adabas System Coordinator (COR) configuration file.

1. Set the database and file number for the COR configuration file.

2. Under file type, choose `C` for COR.

3. Press ENTER to display the following pop-up:

                    - Adabas System Coordinator -
          Group parameter ........ _   Client Runtime Ctrl
          Daemon parameter ....... _     Base .......... _
          System settings ........ _     Override ...... _
                                         Cluster ....... _
                         - Adabas Fastpath -
          Buffer parameter ....... _   Buffer history .. _
          File parameter   ....... _   System settings . _
                          - Adabas Vista -
          Trans. target category . _   Partitioning .... _
          Trans. generation ...... _   System settings . _
          Trans. generation delta. _
          Trans. rule ............ _
          Trans. page ............ _
                        - Adabas SAF Security -
          System settings ........ _

          PF3 Cancel   PF10 Sel All   Enter Y to select

   This allows the selection for auditing of some or all of the record types held on the COR configuration file. For a full description of these records, see Configuration File Record Types.

4. Select the records to be audited.

5. The Data Schema on the File-Related parameters screen is forced to be `$CORGFB`.

6. Press PF5 to save the subscription.

7. On the first page of the subscription definition, ensure that Subscription Active is set to `Y`.

### For Security (SEC)

From the SYSALA Main Menu, choose option `S` to modify the Subscription Definitions:

    19:36:20        ***** A D A B A S  AUDITING CONFIGURATION *****      2025-08-14
                Vers 2.3.1                        Main Menu                          M-RP0010
                DBID 11956 File 89

                Code    Function
                ----    ------------------------------
                D     Destination Definitions
                F     Filter Definitions
                G     File Schema Definitions
                S     Subscription Definitions
                T     Admin Subscription Definitions
                V     Global Definitions
                U     Set Lfile parameters
                ?     Help
                .     Exit
                ----    ------------------------------
                Code ... _

                Command ==>
                Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12---
                Help        Exit                                                  Exit

On the subsequent screen, use PF4 to add a new subscription. Fill in the subscription name, ID and description and set a Destination. See Adding Subscription Definitions for more details.

Select the File-related parameters sub-section, then use PF4 to add file-related parameters for the Security (SEC) file.

1. Set the database and file number for the SEC file.

2. Under file type, choose `S` for Security.

3. Press ENTER to display the following pop-up:

             - File View Selections -
                       Natural
                       Load .................... _
                       Source .................. _

                       Security
                       Choose objects ........... _

                       Mark selections with 'Y'

                       PF3---
                       Cancel

   If you mark `Security Choose objects`, additional pop-ups are shown:

                       - Security View: Other Objects 1 of 2 -

                       Base application record ... _   Link member group ........... _
                       Comp. application record .. _   Link node ................... _
                       Control record ............ _   Link owner .................. _
                       Default library profile ... _   Link Predict PRD-3GL-Library. _
                       Default user profile ...... _   Link Predict PRD-doct-object. _
                       Default utility profile ... _   Link Predict PRD-ext-object.. _
                       Link dataset .............. _   Link Predict PRD-function ... _
                       Link DDM modifier ......... _   Link printer ................ _
                       Link disallowed modules ... _   Link private mode library ... _
                       Link environment .......... _   Link steplib library ........ _
                       Link file ................. _   Link user library ........... _
                       Link library processor user _   Link user library commands .. _
                       Link mailer mailbox ....... _   Link user library processors. _
                       PF3 Cancel   PF10 Sel All   Enter Y for selecting and next page

   and

                       - Security View: Other Objects 2 of 2 -

                       Link user mailbox ......... _   Profile mailbox ............. _
                       Link utility .............. _   Profile Natural ............. _
                       Logon errors .............. _   Profile NatWebio server ..... _
                       Logon records ............. _   Profile node ................ _
                       Logon user exit error ..... _   Profile operations .......... _
                       Predict PRD-3GL-library ... _   Profile printer ............. _
                       Predict PRD-docu-object ... _   Profile RPC server .......... _
                       Predict PRD-extern-object . _   Profile user ................ _
                       Predict PRD-function ...... _   Profile Utility ............. _
                       Profile batch job ......... _   Profile Volume Serial ....... _
                       Profile dataset ........... _   Profile VTAM application .... _
                       Profile file .............. _   Release ET .................. _
                       Profile library ........... _
                       PF7 Previous page   PF10 Sel All   Enter Y for selecting

   This enables the selection of some or all objects stored in the SEC file for auditing.

4. Select the objects to be audited.

5. The Data Schema on the File-Related parameters screen is dependent on your selection. It is forced to be one of the following values: `NAT-DIR`, `NSC-ANY`, `NSC-TOS`, `NSC-LOG`, or `NSC-ERR`.

6. Press PF5 to save the subscription.

7. On the first page of the subscription definition, ensure that Subscription Active is set to `Y`.

### For Natural (NAT)

From the SYSALA Main Menu, choose option `S` to modify the Subscription Definitions:

    19:36:20        ***** A D A B A S  AUDITING CONFIGURATION *****      2025-08-14
                Vers 2.3.1                        Main Menu                          M-RP0010
                DBID 11956 File 89

                Code    Function
                ----    ------------------------------
                D     Destination Definitions
                F     Filter Definitions
                G     File Schema Definitions
                S     Subscription Definitions
                T     Admin Subscription Definitions
                V     Global Definitions
                U     Set Lfile parameters
                ?     Help
                .     Exit
                ----    ------------------------------
                Code ... _

                Command ==>
                Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12---
                Help        Exit                                                  Exit

On the subsequent screen, use PF4 to add a new subscription. Fill in the subscription name, ID and description and set a Destination. See Adding Subscription Definitions for more details.

Select the File-related parameters sub-section, then use PF4 to add file-related parameters for the Natural (NAT) file.

1. Set the database and file number for the NAT file.

2. Under file type, choose `N` for Natural.

3. Press ENTER to display the following pop-up:

             - File View Natural -
                       Selections

                       Load ....................... _
                       Source ..................... _

                       Enter 'Y' for selecting

                       PF3---
                       Cancel

   This enables the selection of some or all loads or sources stored in the NAT file for auditing.

4. Select the loads or sources to be audited.

5. The Data Schema on the File-Related parameters screen is forced to be `NAT-DIR`.

6. Press PF5 to save the subscription.

7. On the first page of the subscription definition, ensure that Subscription Active is set to `Y`.

## Configuration File Record Types

This section details all auditable record types that appear on the Adabas System Coordinator configuration file.

For each auditable record type, the following product tables show:

- The associated DESCRIPTION.

- The associated RECORD_TYPE field value (which may be used within the Data Viewer to assist in the search for these particular records).

- The associated SCHEMA name (which is listed under all File Schemas within SYSALA).

- Examples of which actions within the Adabas System Coordinator, Adabas Fastpath, Adabas Vista or Adabas SAF Security online services (SYSCOR, SYSAFP, SYSAVI and SYSAAF respectively) result in the access/modification of such a record type.

The following topics are covered below:

- Adabas System Coordinator

- Adabas Fastpath

- Adabas Vista

- Adabas SAF Security

### Adabas System Coordinator

DESCRIPTION | RECORD_TYPE | SCHEMA | SYSCOR
--- | --- | --- | ---
Group Parameter | GPR | #CORGPR | 1.2 Daemon Group Parameters
Daemon Parameter | DPR | #CORDPR | 1.2 Daemon Group Parameters, then option L
System Settings | SSR | #CORSSR | 0.2 Security Settings
Client Runtime Controls (Base) | RCB | #CORRCB | 1.1 Client Runtime Controls
Client Runtime Controls (Overrides) | RCO | #CORRCO | 1.1 Client Runtime Controls, then option O
Client Runtime Controls (Cluster) | RCC | #CORRCC | 1.1 Client Runtime Controls, specifically for DTR type jobs

### Adabas Fastpath

DESCRIPTION | RECORD_TYPE | SCHEMA | SYSAFP
--- | --- | --- | ---
Buffer Parameter | BPR | #CORBPR | 1.1 Buffer Parameters
File Parameter | FPR | #CORFPR | 1.2 File Parameters
Buffer History | BHR | #CORBHR | 5.1 Asynchronous Buffer Services, then option L
| BHX | #CORBHX | See Note 1
System Settings | FSR | #CORFSR | 0.2 Security Settings

Note 1

Adabas Fastpath buffer history records are paired. The BHR is the main buffer history record and the BHX goes into more details on how the storage was used.

### Adabas Vista

DESCRIPTION | RECORD_TYPE | SCHEMA | SYSAVI
--- | --- | --- | ---
Translation Target Category | TTC | #CORTTC | 1.2 File Translation, then from within a change delta, PF9 to access the Site Polices for Target Categories
Translation Generation | TGR | #CORTGR | 1.2 File Translation, Maintain Generations
Translation Generation Delta | TGD | #CORTGD | 1.2 File Translation, Maintain Generation Deltas
| TDT | #CORTDT | See Note 2
Translation Rule | TRR | #CORTRR | 1.2 File Translation, then from within a change delta Maintain Translation Rules
Translation Page | TPR | #CORTPR | 1.2 File Translation, then from within a change delta Maintain Pages
Partitioning | PAR | #CORPAR | 1.1 File Partitioning
| PAX | #CORPAX | See Note 3
System Settings | VSR | #CORVSR | 0.2 Security Settings

Note 2

Adabas Vista translation generation delta records are comprised of one delta table record (TDT) that holds the status of each delta, and multiple delta description records (TGD).

Note 3

Adabas Vista partitioning records are comprised of one header record (PAR) and multiple detail records (PAX) for each member of the partition.

### Adabas SAF Security

DESCRIPTION | RECORD_TYPE | SCHEMA | SYSAAF
--- | --- | --- | ---
System Settings | XSR | #CORXSR | 0.2 Security Settings

### On this page

- Prerequisites
- Adabas Nucleus
- SYSALA - Define a New Subscription
- Configuration File Record Types