XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Appendix D: XAC Interactive Commands
XYPRO Technology Corporation 235 Proprietary and Confidential
D6: <<LOCK
This command allows you to securely leave your XAC terminal session without ending
the session. By keying in the <<LOCK command before leaving your terminal, XAC will
request the NonStop Kernel password for the user who invoked XAC before allowing
input to the session. No further commands will be accepted in the XYGATEAC session
until the password is correctly entered.
A user wanting to use the terminal can, however, press Ctrl+Y (EOF) at the password
prompt to end the XAC session. This will allow the user to get back to the original
logged on TACL. If you properly use XAC’s features, this is not a problem as all
privileged commands are protected from use by unauthorized individuals by an
ACACL Command Entry specifying VERIFYUSER.
Example:
$SYSTEM.SECURITY 45> XAC SAFECOM-ADMIN
XYGATEAC 5.75 XYPRO \N1 20991231 (see <<CONFIG for Copyright)
SAFEGUARD COMMAND INTERPRETER - T9750H05 - (16JAN2013) SYSTEM \N1
1 =
1 = ... <some commands are entered>
.
.
(253,1)-14 = <<LOCK
XAC - \N1.QA.IK Password:
Note: LOCK validates the userid and password when the password is entered. This
means that a frozen or expired userid will result in PASSWORDTIMEOUT
replying that the password is invalid. If the password has expired, the user will
be prompted to change the password.