XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
Reference Manual
Appendix B: The UAACL File
XYPRO Technology Corporation 263 Proprietary and Confidential
B15: AUTHENTICATE_MAXIMUM_ATTEMPTS
The AUTHENTICATE_MAXIMUM_ATTEMPTS keyword defines the number of failed
logons that will trigger the AUTHENTICATE_FAIL_FREEZE or
AUTHENTICATE_FAIL_TIMEOUT or AUTHENTICATE_FAIL_STOP features.
If present in a UAGroup, this keyword’s value overrides the one in the UACONF file.
If this keyword is omitted, the value in the UACONF file is used.
Refer to the Example in Appendix B12: on page 261.
Syntax:
AUTHENTICATE_MAXIMUM_ATTEMPTS <number>
B16: DESCRIPTION
This keyword allows you enter a text string explanation for a given UAGROUP. The
text string can be up to 64-characters in length and must be enclosed by double-
quotation marks.
Syntax:
DESCRIPTION "<string>"
Example:
FOGROUP WHO-CAN-BE-SUPER
DESCRIPTION "Only members of $PRIV-PEOPLE can logon to SUPER.SUPER"
B17: DIALOG_MODE
The DIALOG_MODE option can be used for requesting programs such as
XYGATEAC, XYGATEHE or XYGATETR to logon without entering a password. For
example XYGATEAC uses a non dialog type logon for "logons to switch user." Dialog
style logon is done at the "verifyuser_prompt" and "authenticate_user prompt."
Syntax:
DIALOG_MODE {ON | OFF}
DIALOG_MODE ON applies to dialog type logons. DIALOG_MODE OFF applies to non
dialog type logons.
The Example below will allow users to logon without entering a password if the
requestor program is $SYSTEM.XYGATEAC.XYGATEAC and the logon type is a non-
dialog mode. This is because the keyword DIALOG_MODE set to OFF in the above
UAGROUP XYGATEAC.
Example: How to allow XYGATEAC to do logon switching
UAGROUP XYGATEAC
FROM_USER $EVERYONE
TO_USER $EVERYONE
REQUESTOR $SYSTEM.XYGATEAC.XYGATEAC
DIALOG_MODE OFF