Guardian Procedure Calls Reference Manual

The table below summarizes the functionalities:
FunctionalityBit 15Bit 2
Privlogon (logon without passwords)11
Privlogon (authenticate-only with no delay imposed on supplying incorrect password
when Safeguard is up)
01
Regular logon (password necessary for logon)10
Regular authenticate-only (time delay imposed on failure of successive password verification
attempts)
00
◦ If privlogon is requested through setting the options bit 2 and 15 to 1 when Safeguard
software is running, and the PRIV-LOGON disk-file attribute of the program file that invokes
the USER_AUTHENTICATE_ is set to ON, the setting of bits 4, 7, 8, 9, 10, 12, 13 or 14
to ON is ignored.
◦ On systems where Safeguard is not running, a licensed program file may invoke
USER_AUTHENTICATE_ with options bit 2 and 15 set to 1 to request a successful logon
without supplying a password. However, a licensed program file invoking
USER_AUTHENTICATE_ with options bit 2 set to 1 and bit 15 set to 0, is subjected to
a time delay on supplying a wrong password.
NOTE: The privlogon functionality is supported only on systems running H06.19 and
later H-series RVUs and J06.08 and later J-series RVUs.
◦ A password change request should not be specified during a privlogon request. The
password change request is ignored and the password is not changed, when privlogon
is requested through setting the options bit 2 and 15 to 1 when Safeguard software is
running, and the PRIV-LOGON disk-file attribute of the program file that invokes the
USER_AUTHENTICATE_ is set to ON.
Safeguard Considerations
If the Safeguard software has BLINDLOGON configured, USER_AUTHENTICATE_ enforces blind
logon regardless of the setting of options.<13> for blind logon.
OSS Considerations
• The initdir parameter indicates the OSS pathname for the initial working directory for the
specified user in an OSS environment.
• The initprog parameter returns the OSS pathname for the initial program for the specified
user in an OSS environment.
Example
The following example shows how a user can log on and how to handle errors:
1. Set these parameters and call USER_AUTHENTICATE_:
inputtext = user name
options = bit <15> is set to 1
dialog-id = 0F
2. If error = 70 and status = 4, then prompt the user for a password, disable echo with
SETMODE function 20, set these parameters, and call USER_AUTHENTICATE_:
inputtext = password
1450 Guardian Procedure Calls (T-V)