XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Appendix E: XAC Host Macros
XYPRO Technology Corporation 262 Proprietary and Confidential
E12: XAC_EDIT_ACL
The XAC_EDIT_ACL macro automates the recommended method of changing the
ACACL file. First, the macro makes a duplicate of the current ACACL file. Then it
presents the duplicate for editing. After all the editing changes are done, the duplicate
is checked for syntax errors. If no errors are found, the security administrator can
choose to rename the current ACACL and put the new one in its place. The current
ACACL is renamed to OLDACLnnn, where nnn is an incrementing three-digit number.
The NEWACL is renamed to ACACL. Twenty iterations of the OLDACLnnn files are
retained in the XAC subvolume.
Example 1:
$SYSTEM.XYGATEAC 5> XAC_EDIT_ACL
This file edits the current XYGATE-USER-AUTHENTICATION
list. It will create a file named $SYSTEM.XYGATEAC.NEWACACL from
the current $SYSTEM.XYGATEAC.ACACL file.
These are your old $SYSTEM.XYGATEAC.ACACL files:
$SYSTEM.XYGATEAC
CODE EOF LAST MODIFIED OWNER RWEP PExt SExt
OLDACL 101 2260 19DEC2002 4:46 222,233 CCCC 2 2
OLDACL00 101 3078 17AUG2002 3:03 222,233 NUUU 2 2
OLDACL01 101 3316 17AUG2002 3:57 222,233 NUUU 2 2
FILES DUPLICATED: 1
TEXT EDITOR - T9601D20 - (01JUN93)
CURRENT FILE IS $SYSTEM.XYGATEAC.NEWACACL
*
. . . <make changes here> . . .
*e
Checking for SYNTAX errors in the NEWACACL
XYGATEAC 5.60 (c) 1999-2010 XYPRO Technology Corporation XYPRO Technology \SIMI
20091231
ACCONF CHECKSUM 336940895 ($SYSTEM.XYGATEAC.ACCONF)
ACACL CHECKSUM 1451102739 ($SYSTEM.XYGATEAC.NEWACACL)
No syntax errors found
Do you want to install the new ACL (Y/N) <N>?y
FILES DUPLICATED: 1
Last generation is $SYSTEM.XYGATEAC.oldacl02
ACACL file is updated to NEWACACL contents
The XYGATEAC server process will be updated with the new rules in the ACACL as
soon as the next request is transmitted to the server.
If the syntax check fails, the macro does not continue:
Example 2:
$SYSTEM.XYGATEAC 6> XAC_EDIT_ACL