TACL Reference Manual

UTILS:TACL Commands and Functions
HP NonStop TACL Reference Manual—429513-018
8-103
LOGON Command
•
When you enter a full LOGON command, your identity and password are displayed
on the terminal screen. You can use the blind password feature in the TACL
configuration or in Safeguard to ensure security.
•
The process accessor ID and creator accessor ID of the user logging on are
propagated to any descendant processes of TACL. (For a description of accessor
IDs, see the Guardian User’s Guide.)
•
If you are logged on as the super ID, you can log on as any user in your system
without giving that user’s password. Similarly, if you are a group manager, you can
log on as any member of your group without giving that user’s password.
•
Entering the LOGON command from a logged-off state clears all assignments you
made with the ASSIGN and PARAM commands, clears all DEFINEs, and resets
the Inspect setting to the default value of OFF (see the SET INSPECT Command
on page 8-193 for information about Inspect settings). But if you log on without
explicitly logging off the previous user, the assignments, parameters, and DEFINEs
are retained, and the current Inspect setting remains in effect (see Example 3 on
page 8-106).
•
The ability to log on from a logged-on state can be disabled by setting the TACL
configuration option NOCHANGEUSER to -1. To display the value of
NOCHANGEUSER, use #GETCONFIGURATION /NOCHANGEUSER/.
•
If the TACL configuration option BLINDLOGON is not set to 0 or if Safeguard is
running and the Safeguard NAMELOGON flag is not set to 0 (for
USER_AUTHENTICATE_ call), the use of the comma is prohibited. The password
must be entered at its own prompt while echoing is disabled. To display the value
of BLINDLOGON, use #GETCONFIGURATION /BLINDLOGON/.
•
If the TACL configuration option REMOTECMONREQUIRED is not set to 0, all
operation requiring approval by remote $CMON are denied if that remote $CMON
is unavailable or is running too slowly. To display the value of
REMOTECMONREQUIRED, use #GETCONFIGURATION
/REMOTECMONREQUIRED/.
•
The configuration information in effect for a particular user ID depend on the
setting of the REQUESTCMONUSERCONFIG option.
When a TACL process is started, the configuration information consists of default
values. The process is in the no-user-logged-on state.
If a TACL process is in the no-user-logged-on state when a LOGON command is
received and REQUESTCMONUSERCONFIG is OFF, the TACL process sends an
initial request to the CMON process for configuration information and then sends
the LOGON request.
°
If the CMON process does not return configuration information, then the TACL
process uses the configuration information it had for the no-user-logged-on
state.