XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
Reference Manual
Appendix B: The UAACL File
XYPRO Technology Corporation 284 Proprietary and Confidential
B45: RSA_REQUIRE_PASSWORD
The RSA_REQUIRE_PASSWORD keyword value determines whether or not all users,
some users, or no users will be required to enter a Guardian PASSWORD in addition
to the PASSCODE. This keyword can be present in the UACONF file, the UAACL file
or both. The UACONF value will be enforced globally unless overridden by values set
in individual UAGroups in the UAACL file.
When running the XUA_RSA_INSTALL macro as the initial step in configuring the
RSA interface, the answer to the prompt "Do you want to require a password in
addition to the SecurID token for all NonStop users?" will create an entry in the
UACONF file. This entry can be changed at anytime by direct editing of the UACONF
file.
Syntax:
RSA_REQUIRE_PASSWORD {ON | OFF}
ON - Users will be prompted for the NonStop password and then, if the password is
correct, the RSA prompt(s) will be presented. Validity of both is required for the
successful logon.
OFF – The users are only presented with the PASSCODE, when logging on.
Example – How to require a password in addition to RSA authentication:
UAGROUP OPERATORS
Description "All operators authenticated with RSA SecurID and password"
RSA_AUTHENTICATE ON
RSA_REQUIRE_PASSWORD ON
!Selection Criteria:
FROM_USER $EVERYONE
TO_USER $OPERATORS