Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Introduction
Safeguard Reference Manual — 520618-030
1 - 9
Definition of Terms: Authentication, Local, and
Remote
User Auditing
For users, the following auditing specifications are available:
AUDIT-AUTHENTICATE-PASS
AUDIT-AUTHENTICATE-FAIL
AUDIT-MANAGE-PASS
AUDIT-MANAGE-FAIL
AUDIT-USER-ACTION-PASS
AUDIT-USER-ACTION-FAIL
For users, the two AUDIT-AUTHENTICATE attributes control the auditing of user
authentication attempts. The two AUDIT-MANAGE attributes control the auditing of
attempts to manage (change, read, or delete) the Safeguard protection record for that
user. The two AUDIT-USER-ACTION attributes control the auditing of attempts by the
user to perform an event.
The four possible values for each auditing attribute:
ALL
LOCAL
REMOTE
NONE
Definition of Terms: Authentication, Local, and Remote
Two important security-related characteristics of a user are whether the user is
authenticated and whether the request made by the user is local or remote. The
following paragraphs define the terms authentication, local user, remote
user, local request, and remote request.
Authentication
The verification of a user’s claimed identity as a valid local user. Authentication might
or might not be followed by logging the user on to the system. That is, authentication is
always a part of logon, but logon does not always occur after authentication.
A user must be authenticated before logon is permitted. T
ypically, after a user has
been authenticated, a session is started by logging the user on to the system and
initializing a process to function on the user’s behalf.
When a user logs on through a command interpreter
, the command interpreter
assumes the identity of the user by adopting the user’s user ID as its PAID (process
accessor ID).
Local User
A term used in this manual to refer to a locally authenticated user. A process belonging
to a user who has been authenticated by the local system.