User access through WEBPCM can be tracked in several ways:
-
Web Transaction Server Transaction Log
All WEBPCM requests can be logged in the Web Transaction Server Transaction Log. If the Web Transaction Server Transaction Log is configured to log the field x-application, which identifies the CGI/AAPI name that handled the request, the requests to WEBPCM can easily be found.
-
SUMLOG file
As USERDATA is called to authorize users, check the SUMLOG for entries made by USERDATA when users are sending invalid passwords.
-
LOGONCHECK procedure
If the ClearPath MCP server has a SECURITYSUPPORT library installed, WEBPCM calls the LOGONCHECK procedure for each attempted log-on. You can then code LOGONCHECK to keep its own access record.

