Safeguard Reference Manual (G06.24+, H06.03+ )

User Security Commands
Safeguard Reference Manual—520618-013
5-25
INFO USER Command
The super ID can be frozen. The result of freezing the super ID is that this ID
cannot log on. Freezing the super ID has no effect on any existing processes
owned by the super ID, including logged-on TACLs.
•
Freezing a user who is currently logged on
Although a user can be frozen while logged on, freezing has no effect on the user’s
current command interpreter session. After logging off, however, the user cannot
log on until the ability to log on is restored through the THAW USER command.
•
Freezing a network user’s local access.
Freezing the local access of a network user serves only to prohibit the network
user from logging on to your system. The network user can still access objects on
your system from the remote system.
•
Local super ID logging on as another frozen user ID
Even if a user’s ability to log on to the system is frozen, the local super ID (and the
user’s group manager) can log on as that user. By default, the local super ID can
log on as any user defined for the system without supplying a password unless the
configuration attribute PASSWORD-REQUIRED is set to ON (described in
Section 16, Safeguard Subsystem Commands).
•
Effect of freezing a user on user aliases
Freezing a user authentication record has no effect on user aliases associated with
the user ID. The user can still log on using an alias.
Examples
1. Either of these two FREEZE commands suspends the user who has the user
name PRS.HARRY and the user ID 86,2:
=FREEZE USER prs.harry
=FREEZE USER 86,2
2. The owner of the user authentication records for the ACCTG group can freeze all
users whose administrative group is ACCTG:
=FREEZE USER acctg.*
INFO USER Command
INFO USER displays a report about the user-attribute values currently stored in a
user’s authentication record.
Use of the INFO USER command is limited to these users:
•
The user
•
The primary and secondary owners of the user’s authentication record