XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
Reference Manual
Appendix B: The UAACL File
XYPRO Technology Corporation 261 Proprietary and Confidential
B12: AUTHENTICATE_FAIL_STOP
The AUTHENTICATE_FAIL_STOP keyword is used to stop the process when the
number of failed logons without a good logon for a user reaches the limit set greater
than the value of AUTHENTICATE_MAXIMUM_ATTEMPTS.
If present in a UAGroup, the value of this keyword overrides that in the UACONF file.
If the keyword is omitted, the value in the UACONF file is used.
Syntax:
AUTHENTICATE_FAIL_STOP {ON | OFF}
In the Example below, when the number of failed logons for a user becomes 5 (that is,
greater than 4), then the appropriate process that is trying to logon will be stopped.
Example: How to set AUTHENTICATE_FAIL_STOP for selected userids
UAGROUP STOP-PROCESS
DESCRIPTION "Stop the process that fails logon"
AUTHENTICATE_MAXIMUM_ATTEMPTS 4
AUTHENTICATE_FAIL_STOP ON
!Selection Criteria:
FROM_USER 0,0
TO_USER $EVERYONE
REQUESTOR $SYSTEM.SYSNN.TACL
B13: AUTHENTICATE_FAIL_TIMEOUT
The AUTHENTICATE_FAIL_TIMEOUT keyword defines the amount of time that the
process doing the logon will suspend when the number of failed logons without a good
logon exceeds the value of AUTHENTICATE_MAXIMUM_ATTEMPTS.
If present in a UAGroup, the value of this keyword overrides that in the UACONF file.
If the keyword is omitted, the value in the UACONF file is used. If the keyword
AUTHENTICATE_FAIL_TIMEOUT is set to zero, then it will default to Safeguard
value.
Syntax:
AUTHENTICATE_FAIL_TIMEOUT <number>
In the Example below, when the number of failed logons for the members of the
ACLGROUP $SECURITY becomes 4 (that is, greater than 3), then the subject user’s
process will be suspended for 60 seconds.
Example: How to set AUTHENTICATE_FAIL_TIMEOUT for selected userids
UAGROUP FAIL-TIMEOUT-SECURITY
DESCRIPTION "Security Fail logon will be timed out"
AUTHENTICATE_MAXIMUM_ATTEMPTS 4
AUTHENTICATE_FAIL_TIMEOUT 60 ! MEASURED IN SECONDS
!Selection Criteria:
FROM_USER 0,0
TO_USER $SECURITY