Guardian Procedure Calls Reference Manual (G06.25+)

Guardian Procedure Calls (T-V)
Guardian Procedure Calls Reference Manual—522629-013
15-31
USER_AUTHENTICATE_ Procedure
<10> Send $CMON the Logon^msg message (-50). This bit is valid either when
Safeguard software is running and configured with CMON ON or when
Safeguard software is not running.
<11> Do not allow the super ID to log on.
<12> Do not allow a logon with a Guardian user ID. When Safeguard software is
running, the user can log on specifying either a member name or an alias.
When Safeguard software is not running, the user can log on specifying a
member name.
<13> Require blind logon. Setting this bit has the same effect as configuring
BLINDLOGON using the Safeguard product. Passwords in input
text are
ignored unless bit 8 is set to assert that password echoing did not occur.
Setting this bit is effective only on the first call of a dialog; it is ignored on
the second or subsequent call.
If blind logon is set in bit 13 or configured using the Safeguard product, and
a password is provided in input
text, and bit 8 is set, authentication
finishes in one call to USER_AUTHENTICATE_. If bit 8 is not set, then
the outcome depends on
dialog-id:
•
If dialog-ID is supplied, then even if a password is provided in
input
text, USER_AUTHENTICATE_ returns with error equal to 70
and
status equal to 4 to indicate that the password must be supplied
in the next call to USER_AUTHENTICATE.
•
If dialog-id is not supplied and a password is supplied in inputtext,
then the USER_AUTHENTICATE_ returns with
error equal to 48 and
status equal to 4 to indicate a security violation.
<14> Do not log on if $CMON has an error or timeout. Setting this bit has the
same effect as configuring Safeguard software with CMON ON and
CMONERROR DENY. This bit has meaning only if CMON communication
is attempted (either bit 9 or bit 10 is set, or the Safeguard software is
configured with CMON ON).
<15> Log on and update the process’s attributes to reflect the user’s attributes.
Following a successful logon with this procedure, the calling process is
considered local with respect to the system on which it is running. Note
that authentication occurs without logon when this bit is set to 0.
The default value is 0, which requests that the specified user be authenticated
without logon, additional restrictions, or requests.
dialog-id input,output
FIXED .EXT:ref:1
specifies the identifier of the dialog and allows an authentication to take place over
multiple calls to the procedure. To begin a dialog with USER_AUTHENTICATE_,
set
dialog-id to 0F. Use the dialog-id returned on each subsequent call to
USER_AUTHENTICATE_ to continue the dialog. Error 70 (continue authentication