XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Chapter 2. Configuring XAC
XYPRO Technology Corporation 32 Proprietary and Confidential
Network users can also use XAC with the simple addition of a node name on the
ACACL Command Entry name:
\XYPRO.$SYSTEM.MYSUBVOL 28> XAC \XYS7000.SPOOLCOM-254 JOB 1265,START
This invocation of the XAC macro will execute the XYGATEAC program on the
\XYS7000 node with results similar to that which a user would get if a TACL was
started on \XYS7000, logged on as the “254” user, and then SPOOLCOM JOB
1265,START, was executed at the TACL prompt. The only difference would lie in the
default volume and subvolume, which would remain that of the original system when
XAC \XYS7000.SPOOLCOM-254 is used.
In both of the cases above, the local node would have complete control over which
local and remote NonStop Kernel Userids are to be authorized to execute the
“SPOOLCOM-254” ACACL Command Entry on that local node.
2.4 Using XAC without the XAC Macro
Another way to execute XYGATEAC is by invoking it directly. This is often used when
setting up XAC sessions as the action to occur when a Safeguard TERMINAL is used
or the TACL service is chosen from the TCP/IP services screen. This is done via
TACL, the NEWPROCESS or PROCESS_CREATE_ system call or other program
execution command with the startup message containing both the ACACL Command
Entry name and the parameters.
For example, you can execute XYGATEAC directly from a TACL:
TACL 42> RUN $SYSTEM.XYGATEAC.XYGATEAC /NAME/ SPOOLCOM-254 JOB 1265,START
There are three differences between the results of this direct invocation and the
previous two examples where the XAC macro is used.
• First, if TIMEOUT is specified for the SPOOLCOM-254 command and a timeout
occurs, then TACL may not know what to do with the timeout message
XYGATEAC sends to it. XYGATE’s XAC macro is the enforcer of the logoff at
timeout implementation.
• Second, the XAC macro passes run options such as MEM to the processes
created by XYGATEAC, so that without the macro, run options are lost.
• Finally, the #PMSEARCHLIST is managed by the XAC macro. Without it, the
PMSEARCHLIST is reset.