XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
(XUA) 1.85 Reference Manual
Chapter 13. Configuring the RSA SecurID Interface
XYPRO Technology Corporation 105 Proprietary and Confidential
13.9 Testing the RSA Interface and User Mapping
Before you run XUA, you should test your configurations.
Important! XUA does not run in warning mode. The initial configuration must be
tested before the software is enabled as the authentication SEEP in Safeguard.
Once configuration is done, you may run XYGATEUA in ACCESS, EXPLAIN, or
SERVER modes. Refer to Chapter 16, “What-if Testing” starting on page 137 for
instructions on how to test XUA in those modes.
Note: Only EXPLAIN mode shows the ID mapping (see example below).
Example: Sample EXPLAIN mode test
1> RUN XYGATEUA EXPLAIN
Access check:logon "qa-rsa8jxj" * 0,0
Alias : qa-rsa8jxj
User : QA.NEXT8JXJ (222,212) on 2007-01-16 10:48:13.801319
User Expires : * None *
Password Expires : * None *
Password May Change : * None *
Password Must Change : Every 90 days
Password Expiry Grace : 21 days
Last Logon : 2006-09-13 13:42:13.162144
Last Unsuccessful Lgn : 2007-01-16 10:46:22.574923
Fail count : 13
Static fail count : 121
Frozen/Thawed : Thawed
Last Modification Time: 2007-01-16 10:46:22.574923
From User : 000,000 NULL.NULL
Requestor : $NONE $NONE.NONE.NONE
Ancestor : $NONE $NONE.NONE.NONE
To User : 222,212 qa-rsa8jxj (alias)
Port : $NONE $NONE.NONE.NONE
Dialog ID : 001 Tag=0 Dialog=On
State : 01 Initial
Options : 0000000000000001
Option 15: Logon
UAGROUP RSA-AUTHENTICATE Target in TO_USER list
UAGROUP RSA-AUTHENTICATE Subject in FROM_USER list
UAGROUP RSA-AUTHENTICATE Selection criteria satisfied
UAGROUP RSA-AUTHENTICATE AUTHENTICATE_MAXIMUM_ATTEMPTS 3
UAGROUP RSA-AUTHENTICATE AUTHENTICATE_FAIL_FREEZE OFF
UAGROUP RSA-AUTHENTICATE AUTHENTICATE_FAIL_STOP OFF
Password required on - acl password_required
Process state 01
Mapped UID from qa-rsa8jxj to rsa8jxj
Process state 06
re-initializing RSA Proxy
Check RSA_Server: Begin Proc
Start_RSA_OSH: Begin Proc
UA-RSA Client Connected (0008)
0032YN1N00000016Enter USERNAME:
0022YN1U00000006 rsa8jxj
RSA Received from proxy: