Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Event-Exit-Process Commands
Safeguard Reference Manual — 520618-030
15 - 8
ALTER EVENT-EXIT-PROCESS Command
If a timeout occurs and the request is for a authorization event from a deniable
user, the user waits indefinitely with no approval or denial.
If a timeout occurs and the request is for authentication by any user, the
request is denied.
The default value is five seconds. A null entry resets the value to the default
value.
TIMEOUT-ALL-AUTHZREQ { ON | OFF }
specifies whether authorization request from a deniable user will be timed out.
A time out occurs if the response is not recieved from SEEP within the window
indicated by the RESPONSE-TIMEOUT attribute. ON indicates that
authorization requests from all users are timed out. OFF indicates that only
requests from undeniable users are subject to timeout and the deniable users
wait indefinitely with neither approval nor denial to proceed with the request.
Locally authenticated super-group members are treated as undeniable and all
other users are considered as deniable.
ENABLE-AUTHENTICATION-EVENT { ON | OFF }
specifies whether authentication events are sent to the event-exit process.
The default value is OFF.
ENABLE-AUTHORIZATION-EVENT { ON | OFF }
specifies whether authorization events are sent to the event-exit process.
The default value is OFF.
ENABLE-PASSWORD-EVENT { ON | OFF }
specifies whether password change events are sent to the event-exit process
for a p
assword-quality check. ON indicates that the events are sent to the
event-exit process when it is enabled.
If ENABLE-PASSWORD-EVENT is ON and ENABLE-AUTHENTICATION-
EVENT is also ON, password changes that occur during a logon dialog are not
sent to the password-quality exit. In this instance, the password-quality exit is
invoked only for password changes from the PASSWORD program and from
the Safeguard ADD USER, ALTER USER, ADD ALIAS, and ALTER ALIAS
commands.
If ENABLE-PASSWORD-EVENT is ON and ENABLE-AUTHENT
ICATION-
EVENT is OFF, all password change events are sent to the password-quality
exit for evaluation.
Note. The TIMEOUT-ALL-AUTHZREQ attribute is supported only on systems running
H06.26 and later H-series RVUs and J06.15 and later J-series RVUs.