XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
Reference Manual
Appendix B: The UAACL File
XYPRO Technology Corporation 282 Proprietary and Confidential
B42: RESULT_DENIED
If the keyword RESULT_DENIED is present in a UAGroup, then the userids in the
TO_USER list cannot be logged on even with the correct password. This provides
another way to accomplish the same thing as freezing a Safeguard user.
Syntax:
RESULT_DENIED
In the Example below, no userids and aliases on the system will be allowed to logon to
the system using the LOGIN program. This would effectively block logons to the OSS
environment.
Example: How to Prevent Any User Logging Into the OSS Environment
UAGROUP DENY-LOGON-USING-LOGIN
DESCRIPTION "Do not Allow logons via the LOGIN program"
RESULT_DENIED
!Selection Criteria:
FROM_USER 0,0
TO_USER $EVERYONE
REQUESTOR $SYSTEM.SYSNN.LOGIN
B43: RESULT_GRANTED
If the keyword RESULT_GRANTED is present in a UAGroup, then the userids in the
TO_USER list can be logged on to when other selection criteria is met.
RESULT_GRANTED is the default value, so if neither the RESULT_DENIED or
RESULT_GRANTED keyword is present, XUA will authorize the logon attempt when
the selection criteria for the appropriate UAGroup is met.
Syntax:
RESULT_GRANTED
In the Example below, all userids and aliases on the system will not be allowed to
logon using Login.
Example: How to Allow Selected Users to Logon to PrivIDs With the Password
UAGROUP AUTH-USERS-2-PRIVIDS-GUARD
DESCRIPTION "These users are GRANTED to protected userids"
PASSWORD_REQUIRED ON
RESULT_GRANTED
!Selection Criteria:
FROM_USER <list of authorized userids>
TO_USER <list of sensitive userids>