XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
(XUA) 1.85 Reference Manual
Chapter 16. What-if Testing
XYPRO Technology Corporation 141 Proprietary and Confidential
16.6 Testing the Impersonation Logon
Syntax:
<operation> <To_ID> [{<password> | *} [<From_ID> [{<requestor> | *}
[{<ancestor> | *} [{<port> | *} [<predicted result> [<predicted UAGROUP>]]]]]]]
Where:
<Password> can be: <impers-chars><impers-user><impers-chars><password>
The What-if mode can be used to test UAGroup rules with impersonation before
putting the rules into production. The What-if mode can also be used to research logon
questions, such as why a particular impersonation logon failed.
Example 2 below shows that user sec.admin can impersonate and logon as alias
super1 if the requestor is $SYSTEM.SYS22.TACL.
Example 2: How to test Impersonation Logon
$SYSTEM XYGATEUA 30> RUN XYGATEUA ACCESS
XYGATEUA 1.70 (c) 1999-2010 XYPRO Technology Corporation XYPRO Technology
\N1 20091231
UACONF CHECKSUM 1616200458 ($SYSTEM.XYGATEUA.UACONF)
UAACL CHECKSUM 506538062 ($SYSTEM.XYGATEUA.UAACL)
Access check:LOGON ALIAS:"super1" * 0,0 $SYSTEM.SYS22.TACL * *
SEEP msg: Password:
SEEP return 00000,00070,00004
SEEP dialog ID 1 (dialog will continue)
ECHO would be turned off
Response? //sec.admin//mypass
SEEP return 00000,00000,00000
Access result - YES using GROUP UATEST-OPT-IMPER-TACL