NWADReadBitMap

Reads the audit bitmap to see what is being audited

Local Servers:blocking
Remote Servers:blocking
NetWare Server:4.1 and above
Platform:NLM, Windows NT, Windows 95, Windows 98
Library:Cross-Platform Auditing (AUD*.*)
Service:Auditing

Syntax

   #include <nwaudit.h> 
   or 
   #include <nwnet.h> 
    
   N_EXTERN_LIBRARY NWRCODE  NWADReadBitMap  ( 
      NWCONN_HANDLE         conn,  
      nuint32               volumeID,  
      NWAuditBitMap N_FAR  *buffer,  
      nuint16               bufferSize); 
   
   

Pascal Syntax

   uses audwin32 
    
   Function NWADReadBitMap 
     (conn : NWCONN_HANDLE; 
      auditID : nuint32;                          
      Var buffer : NWAuditBitMap; 
      bufferSize : nuint16 
   ) : NWRCODE; 
   
   

Parameters

conn
(IN) Specifies the NetWare server connection handle.
auditID
(IN) Specifies the number of the audited volume.
buffer
(OUT) Points to NWAuditBitMap defining what is being audited.
bufferSize
(IN) Specifies the size of NWAuditBitMap expected. The entire bitmap needs to be received at once.

Return Values

These are common return values; see Return Values (Return Values for C) for more information.

0x0000

SUCCESSFUL

0x8801

INVALID_CONNECTION

0x890A

NLM_INVALID_CONNECTION

0x8983

Auditing Hardware Error

0x8984

Auditing Not Supported

0x8997

Auditing Not Enabled

0x8998

VOLUME_DOES_NOT_EXIST

0x89DE

PASSWORD_HAS_EXPIRED_NO_GRACE

Remarks

NWAuditMap is a 512-bit stream. If a bit is set to one (1), the corresponding item found in auditBitMapIDs enumeration is being audited.

NWAuditBitMap may also be read by calling NWReadAuditConfigHeader.

When a bit in auditBitMapID is set to one, it generates an event and saves it in the audit file. The following table defines the set bits:

Bit

Function

Description

A_BIT_GOPEN_FILE

Global Open

Specifies all file opens are audited.

A_BIT_IOPEN_FILE

Intersection Open

Specifies the intersection of events by a user or a file open is audited.

A_BIT_UOPEN_FILE

Union Open

Specifies the union of events by a user and a file open is audited.

auditBitMapID lists the bits defined by the event bitmap in the audit file configuration header. The first 32 bits are reserved for NDS for container auditing. For a list of event bits, see Event Bits Tables.

NCP Calls

See Also

NWADReadConfigHeader, NWADWriteBitMap, NWADLogin