Safeguard Reference Manual (G06.24+, H06.03+ )

Safeguard Subsystem Commands
Safeguard Reference Manual—520618-013
16-7
ALTER SAFEGUARD Command
G06.29 and later G-series RVUs and H06.08 and later H-series
RVUs)
PASSWORD-ALGORITHM { DES | HMAC256 } (only for systems
running G06.29 and later G-series RVUs and H06.06 and later
H-series RVUs)
PASSWORD-MAXIMUM-LENGTH n (only for systems running H06.08
and later H-series RVUs)
PASSWORD-COMPATIBILITY-MODE { ON | OFF } (only for systems
running H06.08 and later H-series RVUs)
PASSWORD-UPPERCASE-REQUIRED {ON / OFF}
PASSWORD-LOWERCASE-REQUIRED {ON / OFF}
PASSWORD-NUMERIC-REQUIRED {ON / OFF}
PASSWORD-SPECIALCHAR-REQUIRED {ON / OFF}
PASSWORD-SPACES-ALLOWED {ON / OFF}
PASSWORD-MIN-QUALITY-REQUIRED {0 - 4}
AUTHENTICATE-MAXIMUM-ATTEMPTS [ n ]
n defines the maximum number of failed authentication attempts allowed
before the defined actions take place. The default value is 3. (Action is not
taken until after three consecutive invalid attempts have been made.) A value
of 0 specifies no limit to the number of failed logon attempts. A null entry for
this attribute resets the value to the default value.
AUTHENTICATE-FAIL-TIMEOUT [ n [ units ] ]
n defines the length of time to suspend the logon process at the terminal when
AUTHENTICATE-MAXIMUM-ATTEMPTS has been exceeded. The default
value is 60 seconds. (A process is suspended for one minute after exceeding
AUTHENTICATE-MAXIMUM-ATTEMPTS invalid attempts to log on.) units
can be one of the following: SECONDS, MINUTES, HOURS, DAYS, WEEKS,
MONTHS. A null entry for this attribute resets the value to the default value.
AUTHENTICATE-FAIL-FREEZE { ON | OFF }
defines whether to freeze a user ID automatically (as if FREEZE USER had
been invoked) if AUTHENTICATE-MAXIMUM-ATTEMPTS has been exceeded
Caution. Because the command interpreter process at the terminal remains locked for the
duration of the AUTHENTICATE-FAIL-TIMEOUT period, avoid specifying an unreasonably long
period. The terminal is effectively not usable during this period. The only recovery is to start a
new process at the terminal.