Inspecting the logs

You can view events that are related to the terminal server in the syslog on both the terminal server itself and on the target systems.

In particular, the iucvtty program and the z/VM® IUCV HVC device driver log refused IUCV connection attempts.

In addition, unsuccessful login attempts are logged to /var/log/secure by the login program. These log records include the involved terminal IDs.

To find relevant entries on the terminal server examine /var/log/secure. For example, enter:
[root]# grep "iucvconn" /var/log/secure
May 25 10:42:42 termsrv1 iucvconn[27340]: Established connection to lxguest1/lxterm1 for user alice (uid=503)
May 25 10:44:13 termsrv1 iucvconn[27342]: Established connection to lxguest1/lnxhvc0 for user alice (uid=503)
May 25 10:52:42 termsrv1 iucvconn[27358]: Established connection to lxguest3/lxterm1 for user alice (uid=503)
May 25 11:38:09 termsrv1 iucvconn[27522]: Established connection to linux00/lnxhvc0 for user bob (uid=505)
May 25 12:01:34 termsrv1 iucvconn[27589]: Established connection to lxguest1/lxterm1 for user lxguest1 (uid=507)
To find relevant entries on a target system examine /var/log/secure for iucvtty instances. For example, enter:
[root]# grep "iucvtty" /var/log/secure
May 25 10:38:57 lxguest3 iucvtty[23618]: Listening on terminal ID: lxterm1, using pts device: /dev/pts/10
May 25 10:52:42 lxguest3 iucvtty[23618]: Accepted client connection from termsrv1
May 25 11:13:19 lxguest3 iucvtty[23621]: Listening on terminal ID: lxterm1, using pts device: /dev/pts/10
[root]# grep "login: LOGIN ON pts" /var/log/secure
May 25 10:53:08 lxguest3 login: LOGIN ON pts/10 BY alice FROM termsrv1
To find relevant entries on a target system examine /var/log/secure and /var/log/messages for HVC terminal devices. For example, enter:
[root]# grep "LOGIN ON hvc" /var/log/secure
May 25 10:44:22 lxguest1 login: ROOT LOGIN ON hvc0
[root]# grep "hvc_iucv" /var/log/messages
May 25 13:44:16 lxguest1 kernel: hvc_iucv.09cae6: A connection request from z/VM user ID LXGUEST7 was refused