XYGATE Access Control Reference Manual

XYGATE
®
Access Control Reference Manual
Chapter 2. Configuring XAC
XYPRO Technology Corporation 38 Proprietary and Confidential
You can use an asterisk ( * ) in either the GROUP position or the MEMBER position.
And userids can include node names (or an asterisk to represent all nodes) when
appropriate, as follows:
*.* represents all local userids.
\*.*.* represents all network userids.
\NODEA.*.* represents all userids on \NODEA.
Note: Some products, such as XYGATE Host Session Encryption (XHE), do not allow
you to specify node names in user lists because all actions are local.
Example 1: How to wildcard userids
a) SECURITY.ADMIN
b) SECURITY.*
c) *.MGR
d) *.255
e) \*.SECURITY.ADMIN
f) \*.SECURITY.*
g) \*.*.MGR
h) \*.*.255
i) \NODE1.*.255
j) \NODE1.SECURITY.*
In Example 1 above:
a)
local SECURITY.ADMIN
b)
all local members of the SECURITY group
c)
all local userids with the member name
MGR
, regardless of group
d)
All local 255 group members, regardless of group
e)
network SECURITY.ADMIN
f)
all network members of the SECURITY group
g)
all network userids with the member name MGR, regardless of group
h)
the 255 member of all groups from any node
i)
the 255 member of all groups from \NODE1
j)
all members of the
SECURITY
group from \
NODE1
Remember that the operating system will automatically upshift any user names when
making comparisons, so you can enter them in either uppercase or lowercase type.