XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
(XUA) 1.85 Reference Manual
Appendix A: The UACONF File
XYPRO Technology Corporation 212 Proprietary and Confidential
A11: AUTHENTICATE_FAIL_TIMEOUT
The AUTHENTICATE_FAIL_TIMEOUT keyword defines the amount of time that the
authenticating process will suspend when the number of failed logons without a good
logon exceeds the value of AUTHENTICATE_MAXIMUM_ATTEMPTS (page 213).
Syntax:
AUTHENTICATE_FAIL_TIMEOUT <num0:9999>
According to the following Example, when the number of failed logons becomes 4 (that
is, greater than 3), then the userid will be suspended for 60 seconds.
Example:
AUTHENTICATE_MAXIMUM_ATTEMPTS 3
AUTHENTICATE_FAIL_TIMEOUT 60 ! MEASURED IN SECONDS
If AUTHENTICATE_FAIL_TIMEOUT is omitted or if it is set to zero, then this keyword
will default to Safeguard’s AUTHENTICATE-FAIL-TIMEOUT setting.
If this keyword is present in a UAGroup of the UAACL file, that keyword’s value
overrides the one in the UACONF file.
Note: Safeguard delays the authenticating process when the number of failed logons
reaches AUTHENTICATE_MAXIMUM_ATTEMPTS, even though the Safeguard
documentation says exceeds.
A12: AUTHENTICATE_FREEZE_PERIOD
The AUTHENTICATE_FREEZE_PERIOD option allows you to freeze a user
temporarily.
The XUA install program creates a database named UAQUEUE. When a user is
frozen due to the keyword AUTHENTICATE_FAIL_FREEZE being set to ON and has
an AUTHENTICATE_FREEZE_PERIOD in the UAGroup or specified in the UACONF
globally, then XUA will make an entry in the UAQUEUE database specifying when the
account should be unfrozen. The XUA server will periodically check the database and
unfreeze accounts as needed.
Syntax:
AUTHENTICATE_FREEZE_PERIOD <seconds>
Example:
AUTHENTICATE_FREEZE_PERIOD 120
Note: The value for the keyword AUTHENTICATE_FREEZE_PERIOD entered should
be greater than zero; otherwise, XYGATEUA will report syntax errors.
Note: When AUTHENTICATE_FREEZE_PERIOD elapses and the XUA process
unfreezes a user, this mimics an administrator thawing a user from SAFECOM,
which resets the count to zero for the number of failed-authentication attempts
for the user.