Auditing the Adabas System Coordinator Configuration, Security, and Natural Files

This section covers auditing the Adabas System Coordinator (COR) configuration files, which enables auditing of configuration changes for Adabas Fastpath, Adabas Vista, and Adabas SAF Security.

This section also includes auditing the Security (SEC) and Natural (NAT) files.


Prerequisites

Load System Definitions

Auditing the Adabas System Coordinator configuration, Security, or Natural file requires loading additional system definitions using the EZAUDLOD utility. See Installation for z/OS > Complete the Loading of the Audit File Initial Definitions in the Installation documentation.

ADAFRM ALOGFRM DEVICE=

When using ADAFRM ALOGFRM to format audit logs (ALOGs), the required blocksize differs depending on the file type.

For COR or SEC for LOGONERR, LOGONREC (logon errors, logon records), the required blocksize must be 8904 or higher, so the recommendation is to use DEVICE=8390. An example for DEVICE=8390 is as follows:

Device Trks/Cyl ASSO DATA WORK PLOG/RLOG CLOG/ALOG TEMP/SORT/DSIM Notes
8390 15 3440:14 6518:8 10706:5 10706:5 8904:6 8904:6 1

 

For other SEC items, the minimum requirement is to use DEVICE=8392. An example for DEVICE=8392 is as follows:

Device Trks/Cyl ASSO DATA WORK PLOG/RLOG CLOG/ALOG TEMP/SORT/DSIM Notes
8392 15 4092:12 12796:4 18452:3 18452:3 18452:3 18452:3 1

 

For NAT, the minimum requirement is to use DEVICE=3390. An example for DEVICE=3390 is as follows:

Device Trks/Cyl ASSO DATA WORK PLOG/RLOG CLOG/ALOG TEMP/SORT/DSIM Notes
3390 15 2544:18 5064:10 5724:9 5724:9 5064:10 8904:6 1

 

For other devices, refer to DBA Reference Summary > Adabas Device Types and Block Sizes in the Adabas documentation, particularly the CLOG/ALOG column.

Adabas Nucleus

Auditing Parameters

Auditing the Adabas System Coordinator configuration file does not require any special ADAANP nucleus parameter settings. Configure auditing as follows:

  • Configure global auditing parameters as usual to connect to the appropriate audit server ID.

  • Define file auditing parameters for the required file or range of files, including the Adabas System Coordinator configuration, Security, and/or Natural files.

  • Configure database auditing parameters as usual to control the collection of auditing data.

For more information, see Adabas Nucleus Auditing Parameters (ADAANP).

Assign Audit Name

An Audit Name must be assigned to the Adabas System Coordinator configuration, Security, or Natural file in order for it to be eligible for auditing. The utility ADADBS MODFCB AUDITNM= is used for this. See also ADADBS MODFCB AUDITNM=.

SYSALA - Define a New Subscription

For Adabas System Coordinator (COR)

From the SYSALA Main Menu, choose option S to modify the Subscription Definitions:

19:36:20        ***** A D A B A S  AUDITING CONFIGURATION *****      2025-08-14
Vers 2.3.1                        Main Menu                          M-RP0010  
DBID 11956 File 89                                                             
                                                                               
                  Code    Function                                             
                  ----    ------------------------------                       
                    D     Destination Definitions                              
                    F     Filter Definitions                                   
                    G     File Schema Definitions                              
                    S     Subscription Definitions                             
                    T     Admin Subscription Definitions                       
                    V     Global Definitions                                   
                    U     Set Lfile parameters                                 
                    ?     Help                                                 
                    .     Exit                                                 
                  ----    ------------------------------                       
           Code ... _                                                          
                                                                               
                                                                               
                                                                               
Command ==>                                                                    
Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12---
      Help        Exit                                                  Exit   

On the subsequent screen, use PF4 to add a new subscription. Fill in the subscription name, ID and description and set a Destination. See Adding Subscription Definitions for more details.

Select the File-related parameters sub-section, then use PF4 to add file-related parameters for the Adabas System Coordinator (COR) configuration file.

  1. Set the database and file number for the COR configuration file.

  2. Under file type, choose C for COR.

  3. Press ENTER to display the following pop-up:

                 - Adabas System Coordinator -             
       Group parameter ........ _   Client Runtime Ctrl    
       Daemon parameter ....... _     Base .......... _    
       System settings ........ _     Override ...... _    
                                      Cluster ....... _    
                      - Adabas Fastpath -                  
       Buffer parameter ....... _   Buffer history .. _    
       File parameter   ....... _   System settings . _    
                       - Adabas Vista -                    
       Trans. target category . _   Partitioning .... _    
       Trans. generation ...... _   System settings . _    
       Trans. generation delta. _                          
       Trans. rule ............ _                          
       Trans. page ............ _                          
                     - Adabas SAF Security -               
       System settings ........ _                          
                                                           
       PF3 Cancel   PF10 Sel All   Enter Y to select       

    This allows the selection for auditing of some or all of the record types held on the COR configuration file. For a full description of these records, see Configuration File Record Types.

  4. Select the records to be audited.

  5. The Data Schema on the File-Related parameters screen is forced to be $CORGFB.

  6. Press PF5 to save the subscription.

  7. On the first page of the subscription definition, ensure that Subscription Active is set to Y.

For Security (SEC)

From the SYSALA Main Menu, choose option S to modify the Subscription Definitions:

19:36:20        ***** A D A B A S  AUDITING CONFIGURATION *****      2025-08-14
            Vers 2.3.1                        Main Menu                          M-RP0010  
            DBID 11956 File 89                                                             
            
            Code    Function                                             
            ----    ------------------------------                       
            D     Destination Definitions                              
            F     Filter Definitions                                   
            G     File Schema Definitions                              
            S     Subscription Definitions                             
            T     Admin Subscription Definitions                       
            V     Global Definitions                                   
            U     Set Lfile parameters                                 
            ?     Help                                                 
            .     Exit                                                 
            ----    ------------------------------                       
            Code ... _                                                          
            
            
            
            Command ==>                                                                    
            Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12---
            Help        Exit                                                  Exit   

On the subsequent screen, use PF4 to add a new subscription. Fill in the subscription name, ID and description and set a Destination. See Adding Subscription Definitions for more details.

Select the File-related parameters sub-section, then use PF4 to add file-related parameters for the Security (SEC) file.

  1. Set the database and file number for the SEC file.

  2. Under file type, choose S for Security.

  3. Press ENTER to display the following pop-up:

          - File View Selections -    
                    Natural                        
                    Load .................... _   
                    Source .................. _   
                    
                    Security                       
                    Choose objects ........... _   
                    
                    Mark selections with 'Y'       
                    
                    PF3---                         
                    Cancel   
                  

    If you mark Security Choose objects, additional pop-ups are shown:

                    - Security View: Other Objects 1 of 2 -             
                    
                    Base application record ... _   Link member group ........... _  
                    Comp. application record .. _   Link node ................... _  
                    Control record ............ _   Link owner .................. _  
                    Default library profile ... _   Link Predict PRD-3GL-Library. _  
                    Default user profile ...... _   Link Predict PRD-doct-object. _  
                    Default utility profile ... _   Link Predict PRD-ext-object.. _  
                    Link dataset .............. _   Link Predict PRD-function ... _  
                    Link DDM modifier ......... _   Link printer ................ _  
                    Link disallowed modules ... _   Link private mode library ... _  
                    Link environment .......... _   Link steplib library ........ _  
                    Link file ................. _   Link user library ........... _  
                    Link library processor user _   Link user library commands .. _  
                    Link mailer mailbox ....... _   Link user library processors. _  
                    PF3 Cancel   PF10 Sel All   Enter Y for selecting and next page  
                  

    and

                    - Security View: Other Objects 2 of 2 -             
                    
                    Link user mailbox ......... _   Profile mailbox ............. _  
                    Link utility .............. _   Profile Natural ............. _  
                    Logon errors .............. _   Profile NatWebio server ..... _  
                    Logon records ............. _   Profile node ................ _  
                    Logon user exit error ..... _   Profile operations .......... _  
                    Predict PRD-3GL-library ... _   Profile printer ............. _  
                    Predict PRD-docu-object ... _   Profile RPC server .......... _  
                    Predict PRD-extern-object . _   Profile user ................ _  
                    Predict PRD-function ...... _   Profile Utility ............. _  
                    Profile batch job ......... _   Profile Volume Serial ....... _  
                    Profile dataset ........... _   Profile VTAM application .... _  
                    Profile file .............. _   Release ET .................. _  
                    Profile library ........... _                                    
                    PF7 Previous page   PF10 Sel All   Enter Y for selecting         
                  

    This enables the selection of some or all objects stored in the SEC file for auditing.

  4. Select the objects to be audited.

  5. The Data Schema on the File-Related parameters screen is dependent on your selection. It is forced to be one of the following values: NAT-DIR, NSC-ANY, NSC-TOS, NSC-LOG, or NSC-ERR.

  6. Press PF5 to save the subscription.

  7. On the first page of the subscription definition, ensure that Subscription Active is set to Y.

For Natural (NAT)

From the SYSALA Main Menu, choose option S to modify the Subscription Definitions:

19:36:20        ***** A D A B A S  AUDITING CONFIGURATION *****      2025-08-14
            Vers 2.3.1                        Main Menu                          M-RP0010  
            DBID 11956 File 89                                                             
            
            Code    Function                                             
            ----    ------------------------------                       
            D     Destination Definitions                              
            F     Filter Definitions                                   
            G     File Schema Definitions                              
            S     Subscription Definitions                             
            T     Admin Subscription Definitions                       
            V     Global Definitions                                   
            U     Set Lfile parameters                                 
            ?     Help                                                 
            .     Exit                                                 
            ----    ------------------------------                       
            Code ... _                                                          
            
            
            
            Command ==>                                                                    
            Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12---
            Help        Exit                                                  Exit   

On the subsequent screen, use PF4 to add a new subscription. Fill in the subscription name, ID and description and set a Destination. See Adding Subscription Definitions for more details.

Select the File-related parameters sub-section, then use PF4 to add file-related parameters for the Natural (NAT) file.

  1. Set the database and file number for the NAT file.

  2. Under file type, choose N for Natural.

  3. Press ENTER to display the following pop-up:

          - File View Natural -       
                    Selections             
                    
                    
                    Load ....................... _
                    Source ..................... _
                    
                    Enter 'Y' for selecting        
                    
                    PF3---                         
                    Cancel                         
                  

    This enables the selection of some or all loads or sources stored in the NAT file for auditing.

  4. Select the loads or sources to be audited.

  5. The Data Schema on the File-Related parameters screen is forced to be NAT-DIR.

  6. Press PF5 to save the subscription.

  7. On the first page of the subscription definition, ensure that Subscription Active is set to Y.

Configuration File Record Types

This section details all auditable record types that appear on the Adabas System Coordinator configuration file.

For each auditable record type, the following product tables show:

  • The associated DESCRIPTION.

  • The associated RECORD_TYPE field value (which may be used within the Data Viewer to assist in the search for these particular records).

  • The associated SCHEMA name (which is listed under all File Schemas within SYSALA).

  • Examples of which actions within the Adabas System Coordinator, Adabas Fastpath, Adabas Vista or Adabas SAF Security online services (SYSCOR, SYSAFP, SYSAVI and SYSAAF respectively) result in the access/modification of such a record type.

The following topics are covered below:

Adabas System Coordinator

DESCRIPTION RECORD_TYPE SCHEMA SYSCOR
Group Parameter GPR #CORGPR 1.2 Daemon Group Parameters
Daemon Parameter DPR #CORDPR 1.2 Daemon Group Parameters, then option L
System Settings SSR #CORSSR 0.2 Security Settings
Client Runtime Controls (Base) RCB #CORRCB 1.1 Client Runtime Controls
Client Runtime Controls (Overrides) RCO #CORRCO 1.1 Client Runtime Controls, then option O
Client Runtime Controls (Cluster) RCC #CORRCC 1.1 Client Runtime Controls, specifically for DTR type jobs

Adabas Fastpath

DESCRIPTION RECORD_TYPE SCHEMA SYSAFP
Buffer Parameter BPR #CORBPR 1.1 Buffer Parameters
File Parameter FPR #CORFPR 1.2 File Parameters
Buffer History BHR #CORBHR 5.1 Asynchronous Buffer Services, then option L
  BHX #CORBHX See Note 1
System Settings FSR #CORFSR 0.2 Security Settings

Note 1

Adabas Fastpath buffer history records are paired. The BHR is the main buffer history record and the BHX goes into more details on how the storage was used.

Adabas Vista

DESCRIPTION RECORD_TYPE SCHEMA SYSAVI
Translation Target Category TTC #CORTTC 1.2 File Translation, then from within a change delta, PF9 to access the Site Polices for Target Categories
Translation Generation TGR #CORTGR 1.2 File Translation, Maintain Generations
Translation Generation Delta TGD #CORTGD 1.2 File Translation, Maintain Generation Deltas
  TDT #CORTDT See Note 2
Translation Rule TRR #CORTRR 1.2 File Translation, then from within a change delta Maintain Translation Rules
Translation Page TPR #CORTPR 1.2 File Translation, then from within a change delta Maintain Pages
Partitioning PAR #CORPAR 1.1 File Partitioning
  PAX #CORPAX See Note 3
System Settings VSR #CORVSR 0.2 Security Settings

Note 2

Adabas Vista translation generation delta records are comprised of one delta table record (TDT) that holds the status of each delta, and multiple delta description records (TGD).

Note 3

Adabas Vista partitioning records are comprised of one header record (PAR) and multiple detail records (PAX) for each member of the partition.

Adabas SAF Security

DESCRIPTION RECORD_TYPE SCHEMA SYSAAF
System Settings XSR #CORXSR 0.2 Security Settings