Auditing

Directory Server supports i5/OS security auditing. Auditable items include the following:

• Binds to and unbinds from the directory server.
• Changes to permissions of LDAP directory objects.
• Changes in ownership of LDAP directory objects.
• Creation of, deletion of, searches of, and changes to LDAP directory objects.
• Changes to the password of administrator and update distinguished names (DNs)
• Changes to the passwords of users.
• File imports and exports.

You might need to make changes to the auditing settings before auditing of directory entries will work. If the QAUDCTL system value has *OBJAUD specified, you can enable object auditing through iSeries Navigator. For more information about auditing, see Security - Reference or the "Security auditing" topic.