NWReadAuditingBitMap(3nw)

NWReadAuditingBitMap -- reads audit bit map

Synopsis

#include <nwaudit.h> or #include <nwnet.h>

NWCCODE N_API NWReadAuditingBitMap (NWCONN_HANDLE conn, nuint32 volumeNumber, nuint8 N_FAR auditKey, NWAuditBitMap N_FAR buffer, nuint16 bufferSize);

Description

The parameters are as follows:

conn: (IN) Specifies the NetWare server connection handle.
volumeNumber: (IN) Specifies the volume number on the NetWare server.
auditKey: (IN) Points to a 40-byte array.
buffer: (OUT) Points to NWAuditBitMap defining what is being audited.
bufferSize: (IN) Specifies the size of NWAuditBitMap expected. The entire bit map needs to be received at once.

Return values

0x0000: SUCCESSFUL
0x8801: INVALID_CONNECTION
0x8983: Auditing Hardware Error
0x8984: Auditing Not Supported
0x8997: Auditing Not Enabled
0x8998: VOLUME_DOES_NOT_EXIST
0x89DE: PASSWORD_HAS_EXPIRED_NO_GRACE

Notices

NWAuditMap is a 512-bit stream. If a bit is set to one (1), the corresponding item found in auditBitMapIDs enumeration is being audited.

NWAuditBitMap may also be read by calling NWReadAuditConfigHeader.

When a bit in auditBitMapID is set to one, it generates an event and saves it in the audit file. The definition of the set bits follow:

Bit Function Description

A_BIT_GOPEN_FILE Global Open Specifies all file opens are audited.

A_BIT_IOPEN_FILE Intersection Open Specifies the intersection of events by a user or a file open is audited.

A_BIT_UOPEN_FILE Union Open Specifies the union of events by a user and a file open is audited.

Bit	Function	Description
A_BIT_GOPEN_FILE	Global Open	Specifies all file opens are audited.
A_BIT_IOPEN_FILE	Intersection Open	Specifies the intersection of events by a user or a file open is audited.
A_BIT_UOPEN_FILE	Union Open	Specifies the union of events by a user and a file open is audited.

 
 ------------------------------------------------------------- 
| Bit             |  Function         |  Description         | 
|-----------------|-------------------|----------------------| 
| A_BIT_GOPEN_FILE|  Global Open      |  Specifies all file  | 
|                 |                   |  opens are audited.  | 
|-----------------|-------------------|----------------------| 
| A_BIT_IOPEN_FILE|  Intersection Open|  Specifies the       | 
|                 |                   |  intersection of     | 
|                 |                   |  events by a user or | 
|                 |                   |  a file open is      | 
|                 |                   |  audited.            | 
|-----------------|-------------------|----------------------| 
| A_BIT_UOPEN_FILE|  Union Open       |  Specifies the union | 
|                 |                   |  of events by a user | 
|                 |                   |  and a file open is  | 
|                 |                   |  audited.            | 
|-----------------|-------------------|----------------------|

auditBitMapID lists the bits defined by the event bit map in the audit file configuration header. The first 32 bits are reserved for Directory Services for container auditing.

Services

Auditing

NCP calls

0x2222 88 10 Read Audit Bit Map

 
 ----------------------------------------- 
| 0x2222|  88|  10|  Read Audit Bit Map  | 
|-------|----|----|----------------------|

References

NWReadAuditConfigHeader(3nw), NWWriteAuditingBitMap(3nw), NWLoginAsVolumeAuditor(3nw), NWDSReadAuditConfigHeader(3nw)