Guardian Procedure Calls Reference Manual (G06.25+)

Guardian Procedure Calls (T-V)
Guardian Procedure Calls Reference Manual—522629-013
15-39
USER_AUTHENTICATE_ Procedure
•
Incorrect password timeout
When Safeguard software is running, the number of times that a process can pass
an invalid password to USER_AUTHENTICATE_ before the process is suspended
and the length of time that the process is suspended are set during Safeguard
configuration.
When Safeguard software is not running, any process that passes an invalid
password to USER_AUTHENTICATE_ for the third time is suspended for 60
seconds.
Safeguard Considerations
If the Safeguard software has BLINDLOGON configured, USER_AUTHENTICATE_
enforces blind logon regardless of the setting of
options bit <13> for blind logon.
OSS Considerations
•
The initdir parameter indicates the OSS pathname for the initial working
directory for the specified user in an OSS environment.
•
The initprog parameter returns the OSS pathname for the initial program for the
specified user in an OSS environment.
Example
The following example shows how a user can be logged on and how to handle errors.
1. Set the following parameters and call USER_AUTHENTICATE_:
input
text = user name
options = bit <15> is set to 1
dialog-id = 0F
2. If
error = 70 and status = 4, then prompt the user for a password, disable echo
with SETMODE 20, set the following parameters, and call
USER_AUTHENTICATE_:
input
text = password
dialog-id = value of dialog-id returned from the previous call
3. Check
error and status return values and enable echo with SETMODE 20.
•
If error = 0 and status = 0, then the specified user is logged on.
•
If error = 0 and status = 8, then the specified user is logged on but the
password is about to expire. The caller displays a message telling the user to
change the password by the
time-password-expires value.
•
If error = 70 and status = 11, then the specified user is not logged on
because the password has expired. The caller displays a message telling the