IBM i

 View Only
Expand all | Collapse all

Find users accessing Navigator for i

  • 1.  Find users accessing Navigator for i

    Posted 14 days ago
    I've looked through the logs for Navigator for i and don't see a way to find out which users are accessing it. Does anyone know of a way to get that or to enable logging of user access? I'm looking for this for both the new and old Navigator for i.

    ------------------------------
    <><><><><><><><><><>
    Jeffery Green
    Sr. Systems Engineer
    IBM Power / IBM i
    <><><><><><><><><><>
    ------------------------------


  • 2.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    Hello Jeffrey,

    Are you asking this for the New Navigator for i of for the Heritage Navigator for i?

    I suggest you open an IBM case for this. They will for sure be able to answer this question.


    Greetings Rudi

    ------------------------------
    Rudi Van Helvoirt
    ------------------------------



  • 3.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    Hi Rudi, ideally for both old and new Navigator.

    I'll go through IBM Support if no one has an answer here....... I like this forum because other people may have the same question and can find the answer here.

    ------------------------------
    <><><><><><><><><><>
    Jeffery Green
    Sr. Systems Engineer
    IBM Power / IBM i
    <><><><><><><><><><>
    ------------------------------



  • 4.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    Hello

    I do not remember if there is such an access log or not.   But is it the case that your customer wants only a few admins to access it?   If so, I see that it should be easier to use Application Administration function to allow access to only a few admin user profiles. You can control access to all functions or each particular function and this apply to both the old IBM i Navigator and Navigator for i web tool.    This is a good starting point for you :  5 Ways to Control Access using Application Administration5 Ways to Control Access using Application Administration

    For more information, Google on "ibm i application administration".

    Hope this help.

    Satid S.
    IBM ASEAN Lab Services.

    ------------------------------
    SATID SINGKORAPOOM
    ------------------------------



  • 5.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    Hi Satid, thanks for the link, eventually I will want to implement some controls over access to certain functions. For now I am the only one that will need to see who is accessing the Navigator.

    ------------------------------
    <><><><><><><><><><>
    Jeffery Green
    Sr. Systems Engineer
    IBM Power / IBM i
    <><><><><><><><><><>
    ------------------------------



  • 6.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    I tried this out on a test system using the new IBM i Navigator.
    This was from just the initial logon.

    SELECT Message_Timestamp,From_User,From_Job,Message_Id,MESSAGE_TEXT
    FROM TABLE(Qsys2.History_Log_Info(
    Start_Time => current_timestamp - 1 hour,
    End_Time => current_timestamp
    )) i
    WHERE Message_Id in ('CPIAD09','CPI3E34')
    AND
    MESSAGE_TEXT LIKE '%127.0.0.1%';

    returned 7 connections

    for the Heritage Navigator 2 connections were returned

    ------------------------------
    Bryan Dietz
    ------------------------------



  • 7.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    Edited by Jack Woehr 13 days ago
    (Wrong idea here, edited, ignore this message!)

    ------------------------------
    Jack Woehr
    IBM Champion 2021
    ------------------------------


  • 8.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    Edited by Jack Woehr 13 days ago
    Wrong again, ignore ;)

    ------------------------------
    Jack Woehr
    IBM Champion 2021
    ------------------------------


  • 9.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    Ah, wait, I see ... it's gotta be 127.0.0.1 ... and I had missed the current_timestamp -1 hour clause.
    Changed the length of time searched in the log and that worked, thanks, Brian

    ------------------------------
    Jack Woehr
    IBM Champion 2021
    ------------------------------



  • 10.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    Thanks Brian, that gives me some info. I'm looking for more specifics like which Navigator version is being accessed so I'll run this by IBM and post any results in this discussion.

    ------------------------------
    <><><><><><><><><><>
    Jeffery Green
    Sr. Systems Engineer
    IBM Power / IBM i
    <><><><><><><><><><>
    ------------------------------



  • 11.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    I am looking at other options, maybe something like auditing one of the files or directories.
    anything else would probably have to be "added into" the product.

    ------------------------------
    -----
    Bryan Dietz
    ------------------------------



  • 12.  RE: Find users accessing Navigator for i

    Posted 13 days ago
    After discussion with IBM I sorry to say it appears this information isn't trapped in the system. Basically there were 2 options suggested:
    1) You can run an SQL to see current connections to the Navigator ports like this: SELECT * FROM QSYS2.NETSTAT_INFO WHERE LOCAL_PORT = 2002 or LOCAL_PORT = 2004. Unfortunately this only shows current connections so no history is available.
    2) They suggested I could open an RFE as was discussed here. I may do this, it doesn't help today and has no guarantee it will be implemented.

    I also thought of the exit points and will look at creating something that could log access, not sure if it's really an option though.

    If anyone has other ideas please post your thoughts!

    ------------------------------
    <><><><><><><><><><>
    Jeffery Green
    Sr. Systems Engineer
    IBM Power / IBM i
    <><><><><><><><><><>
    ------------------------------



  • 13.  RE: Find users accessing Navigator for i

    Posted 12 days ago

    Better IBM invests in training their support personal.

    At least for new and current Navigator i version you can increase the GUI Log Level to FINEST and you will end up with information for each login in the console.log. See attached screenshots. 


    For the heritage Navigator for i there is also settings for Console Logging and Tracing. There you can specify the Level for each Package. With this you will probably end up with the same information in the logs...



    Kind Regards

    Markus



    ------------------------------
    Markus Neuhold
    ------------------------------



  • 14.  RE: Find users accessing Navigator for i

    Posted 12 days ago
    Markus, this is excellent, exactly what I was looking for. Thank you!

    ------------------------------
    <><><><><><><><><><>
    Jeffery Green
    Sr. Systems Engineer
    IBM Power / IBM i
    <><><><><><><><><><>
    ------------------------------