OSI/FTAM Configuration and Management Manual

Planning, Installing, and Configuring Tandem FTAM
OSI/FTAM Configuration and Management Manual—421944-001
3-21
Disk-File Access
You should choose how the user ID and password are specified based on the needs of
your installation. If you want to avoid having remote users send passwords over
communications lines, you must use the DEFUSER attribute. However, if you want to
require remote users to authenticate themselves, or if you want to provide different
access privileges to different remote users, you must require remote users to send a user
ID and password in each F-INITIALIZE request.
Disk-File Access
All files on the Expand network to which the responder’s system belongs are part of the
responder’s virtual filestore (VFS). Therefore, all files on the network can be available
to remote users, subject to the security mechanisms of the Tandem NonStop Kernel
operating system, the Expand network operating software, and, optionally, the Safeguard
security software. To allow access to files on Expand nodes other than the node where
the responder resides, you must set up the proper remote passwords as described in the
Expand Network Management Guide.
The VFS actions allowed by the FTAM responder depend on the Guardian security
(R W E P—READ, WRITE, EXECUTE, and PURGE) for a file and the user for the
association. For example, if the user ID that the responder uses for your association (as
defined in Table 3-1
on page 3-20) has Tandem purge access to a given file, the
responder allows the FTAM delete-file action.
Table 3-2
shows the file access required for each FTAM VFS action.
Table 3-2. Guardian File Access Required to Perform FTAM VFS Action
FTAM VFS
Action Guardian File Access Required
Guardian Exclusion
Mode
Read READ SHARED
Insert WRITE EXCLUSIVE
Replace WRITE (READ also required for EDIT files) EXCLUSIVE
Extend WRITE (READ also required for EDIT files) EXCLUSIVE
Erase WRITE EXCLUSIVE
Read attributes None SHARED
Change attributes WRITE EXCLUSIVE
Delete file PURGE EXCLUSIVE
Note. The Tandem EXECUTE access for a file has no bearing on FTAM VFS access.
See the File Utility Program (FUP) Reference Manual, the ENSCRIBE Programmer’s Guide,
and, if your files are Safeguard-protected, read the Safeguard Reference Manual for
information on setting READ, WRITE, and PURGE access to a file.