XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
Reference Manual
Appendix B: The UAACL File
XYPRO Technology Corporation 262 Proprietary and Confidential
B14: AUTHENTICATE_FREEZE_PERIOD
The AUTHENTICATE_FREEZE_PERIOD option allows you to freeze a user
temporarily.
The XUA install program creates a database named UAQUEUE. When a user is
frozen because the keyword AUTHENTICATE_FAIL_FREEZE is set to ON and has an
AUTHENTICATE_FREEZE_PERIOD in the UAGROUP or specified in the UACONF
globally, then XUA will make an entry in the UAQUEUE database specifying when the
account should be unfrozen. The UA server will periodically check the database and
unfreeze accounts as needed.
Note: When AUTHENTICATE_FREEZE_PERIOD elapses and the XUA process
unfreezes a user, this mimics an administrator thawing a user from SAFECOM,
which resets the count to zero for the number of failed authentication attempts
for the user.
Syntax:
AUTHENTICATE_FREEZE_PERIOD <seconds>
If user 80,1 or the alias "xytest" in the Example below reaches the failed logon
attempt of 3, then XUA will freeze the user and make an entry in the database to thaw
the user after 120 seconds.
Example:
UAGROUP Temporary-Freeze
Description "Temporarily freeze after failed attempt"
FROM_USER $EVERYONE
TO_USER 80,1 ALIAS:"xytest"
AUTHENTICATE_MAXIMUM_ATTEMPTS 3
AUTHENTICATE_FAIL_FREEZE ON
AUTHENTICATE_FREEZE_PERIOD 120
Note: The value for the keyword AUTHENTICATE_FREEZE_PERIOD entered should
be greater than zero; otherwise, XYGATEUA will report syntax errors.
What-if commands to view the records in the UAQUEUE database :
queueprocess - invokes the processing routine
queuelist - displays entries from the database
queuedelete - deletes all entries from the database
Example: How to view the records in the UAQUEUE database
Access check:queuelist
Time User Action
2010-02-08 11:57:25.896137 xytest THAW
00001 record displayed
The DDL file "UAQUEDDL" supplied with XYGATEUA installation has a dictionary
reference that can be used to run a report on the database.