Safeguard Reference Manual (G06.24+, H06.03+ )

Common SAFECOM Language Elements
Safeguard Reference Manual—520618-013
2-17
User Names
User Names
A user name consists of a group name and a member name, separated by a period.
group-name
is the name of an administrative group. It is one to eight alphanumeric characters
long, the first of which must be alphabetic. In most SAFECOM commands, an
administrative group name is case-insensitive. The alphabetic characters are
assumed to be uppercase. However, group names specified in GROUP commands
are case-sensitive, and the alphabetic characters in an administrative group name
must be entered as uppercase characters in these commands.
member-name
is the name of a user. It is one to eight alphanumeric characters long, the first of
which must be alphabetic. Each member name must be unique within its
administrative group.
A user’s administrative group is identified by the group-name portion of the specific
user’s user name.
An example of a user name is PRS.HARRY. This user’s administrative group is named
PRS, and the user has the member name HARRY.
Network Users
A network user is a system user who has been granted the authority to access objects
on a remote system.
Allowing a network user to access objects on your system requires cooperation
between the system managers (or security administrators) on your system and on the
network user’s node.
First, your system manager or group manager must add the network user as a local
user on your system (with the same user ID and user name as on the other system).
Then, on your system, the manager (or any user with the proper authority) must give
the network user remote passwords for the two systems. And finally, on the network
user’s local system, the system manager on the network user’s node must give the
network user matching remote passwords for the two systems. For more information,
see the Safeguard Administrator’s Manual, the TACL Reference Manual, or the
Security Management Guide.
In a Safeguard access control list, network users are identified by either the network
form of their user ID or the network form of their user name. (The network form of a
user name is not valid for user authentication in a LOGON command or in a call to the
USER_AUTHENTICATE_ procedure or the VERIFYUSER procedure.)
group-name.member-name