XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
Reference Manual
Appendix B: The UAACL File
XYPRO Technology Corporation 274 Proprietary and Confidential
B35: OMIT_PASSWORD_USERS
The keyword OMIT_PASSWORD_USERS represents a subset of users in the
FROM_USER list who do not have to supply a password while logging on to the users
in the TO_USER list.
Syntax:
OMIT_PASSWORD_USERS <user list>
The Example below allows all the members of the $SECURITY to logon as
SUPER.SUPER. In addition, it allows SECURITY.ADMIN and SECURITY.OPER to
logon as SUPER.SUPER without supplying a password.
Example: How to exempt specific FROM_USERS from PASSWORD-REQUIRED
UAGROUP Security.Admin-and-Oper-Password-Not-Required
DESCRIPTION "Security.Admin and Oper Need not supply password"
OMIT_PASSWORD_USERS SECURITY.ADMIN SECURITY.OPER
PASSWORD_REQUIRED
FROM_USER $SECURITY
TO_USER SUPER.SUPER
B36: PASSWORD_MAY_CHANGE
The keyword PASSWORD_MAY_CHANGE represents the number of days before the
password expiration date in which the user may change his or her own password. If
this keyword is omitted, XUA will track the value of the expiration date from Safeguard
and if password expiration date is not effective in Safeguard either, then the user may
change his or her own password at any time.
If present in a UAGroup, this keyword’s value overrides the one in the UACONF file.
If this keyword is omitted, the value in the UACONF file is used.
Syntax:
PASSWORD_MAY_CHANGE <number>
The Example below lets SECURITY.ADMIN change their password 60 days before the
expiry date. PASSWORD_MAY_CHANGE can be set on a per-user basis as shown in
this Example, whereas in Safeguard this can be only set globally.
Example: How to set PASSWORD_MAY_CHANGE for specific users
UAGROUP Security-Password-Change
DESCRIPTION "Security can Change Password 60 days before Expiry"
FROM_USER SECURITY.ADMIN
TO_USER SECURITY.ADMIN
PASSWORD_MAY_CHANGE 60