Guardian Procedure Calls Reference Manual
default-len
input
INT:value
is the length, in bytes, of the default array. default-len is required if default is specified.
This number must always be specified as 36; in the future, new fields can be added to default,
requiring default-len to become larger.
Condition Code Settings
indicates that a buffer is out of bounds, or that an I/O error occurred on the user ID file
($SYSTEM.SYSTEM.USERID).
< (CCL)
indicates a successful verification or logon.= (CCE)
indicates that there is no such user or that the password is invalid.> (CCG)
Considerations
• Specifying 0 for the logon parameter verifies that there is a user with that name on the system,
but you cannot assume that user's identity and you cannot log on. You must supply a password
even if you specify 0 for the logon parameter, unless:
◦ You are the super ID.
◦ You are the group manager (*,255).
◦ You are a user inquiring about yourself.
• If the logon parameter is a value other than 0 and the Safeguard parameter
PASSWORD-REQUIRED is set to OFF, you can assume that user's ID if:
◦ You are the super ID.
◦ You are the group manager (*,255).
◦ You know the user's password.
If you assume one of the above IDs, then your process access ID and creator access ID changes,
you become a local user, and your default file security changes to what is established in the
local USERID file.
• Following a successful logon with this procedure, the calling process is considered local with
respect to the system on which it is running.
• A process that passes an invalid password to VERIFYUSER for the third time is suspended for
60 seconds.
• Note that each call to VERIFYUSER always results in an open, KEYPOSITION,
READUPDATEUNLOCK, WRITEUPDATEUNLOCK, and close operation on the USERID file.
• System users are defined through the TACL ADDUSER command. All TACL commands are
described in the TACL Reference Manual.
1484 Guardian Procedure Calls (T-V)