XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Appendix C: The ACACL File
XYPRO Technology Corporation 140 Proprietary and Confidential
The above COMMAND will execute TACL as the user who invokes the COMMAND.
When this TACL is started, it runs the SETVIIP macro which sets a variable with the
TCP/IP address that is needed for Visual Inspect.
If you prefer, users who will run Visual Inspect can also run the SETVIIP macro within
their TACLCSTM files by adding the following line:
Run $<vol>.<subvol>.SETVIIP
Where $<vol>.<subvol> represents the XYGATEAC location on your system.
Default Command Names
In addition to being able to execute XAC with the <command-name> argument, XAC
recognizes a “no command input” default-command-name for any process executing
the XYGATEAC object. This default command name must be configured in the ACACL
file for each particular object file which might need a no-command-name default. The
default command name is formed from the object filename of the process invoking
XAC. This feature is useful when it is desired to have XAC assist in the control of user
access from HP NonStop access methods such as MLRM (MultiLAN), where you can
only configure the object file to be started and cannot configure the startup message or
parameter text.
When the XYGATEAC object file is started with no command, it searches the ACACL
file for a command with the same name as the object filename of the process that
started it. This is done by converting the object filename into a command-name form
by dropping leading backslashes and dollar signs, changing non-leading dollar signs
and periods to dashes, and the O/S image number replaced with NN, such as SYSNN
for SYS01. This conversion will assure that a new copy of the O/S does not invalidate
the command-name and that any object filename can be converted into a valid set of
command-name characters.
For example, if the MULTILAN network manager ($SYSTEM.SYS03.MLRM) starts an
XAC session without a startup message token for command-name, XAC will look for
an ACACL Command Entry of "SYSTEM-SYSNN-MLRM". The entry for this command
will control what program, such as TACL, is started.