Guardian Procedure Calls Reference Manual (G06.25+)

Guardian Procedure Calls (T-V)
Guardian Procedure Calls Reference Manual—522629-013
15-63
VERIFYUSER Procedure
(Superseded by USER_AUTHENTICATE_
where the legitimate fields are encoded with numbers that
represent the following information:
0 A (any local user)
1 G (any local group member)
2 O (only the local owner)
3 not used
4 N (any network user)
5 C (any network group/community user)
6 U (only the network owner)
7 - (only the local super ID)
default-len input
INT:value
is the length, in bytes, of the
default array. default-len is required if default
is specified. This number should always be specified as 36; in the future, new
fields can be added to
default, requiring default-len to become larger.
Condition Code Settings
< (CCL) indicates that a buffer is out of bounds, or that an I/O error occurred on the
user ID file ($SYSTEM.SYSTEM.USERID).
= (CCE) indicates a successful verification and/or logon.
> (CCG) indicates that there is no such user or that the password is invalid.
Considerations
Condition code CCE returns under the following conditions:
•
Specifying 0 for the logon parameter verifies that there is a user with that name
on the system, but you cannot assume that user’s identity and you cannot log on.
You must supply a password even if you specify 0 for the
logon parameter,
unless:
•
You are the super ID.
•
You are the group manager (*,255).
•
You are a user inquiring about yourself.
•
If the logon parameter is a value other than 0 and the Safeguard parameter
PASSWORD-REQUIRED is set to OFF, you can assume that user’s ID if:
•
You are the super ID.
•
You are the group manager (*,255).
•
You know the user’s password.
If you assume one of the above IDs, then your process access ID and creator
access ID changes, you become a local user, and your default file security
changes to what is established in the local USERID file.