XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
(XUA) 1.85 Reference Manual
Chapter 1. Installing XUA
XYPRO Technology Corporation 12 Proprietary and Confidential
1.3.2 Securing the XYGATEUA Files with XYGATEOS
This section describes how to secure the XYGATEUA files with XYGATEOS.
FOGROUP SECURE-XYGATEUA-FILES
DESCRIPTION "Secure XYGATE User Authenticate Module"
! (Everyone must be able to Read and Execute these Object Files)
! *** Selection Criteria ***
MASK $SYSTEM.XYGATEUA.P++F001
$SYSTEM.XYGATEUA.XYGATEUA
$SYSTEM.XYGATEUA.UACONF
$SYSTEM.XYGATEUA.UAACL
$SYSTEM.XYGATEUA.UALIB
$SYSTEM.XYGATEUA.LDAP*
$SYSTEM.XYGATEUA.RSA*
! *** Access Granted ***
ACL $SYSTEMS (R,W,E,P,C,RN,G,L,PR)
$SECURITY (R,W,E,P,C,RN,G,L,PR)
$EVERYONE (R,E)
! *** Other Keywords ***
PROCESS_AS_ACL ! Final Answer on ACCESS
AUDIT_ACCESS_PASS ON ! Audit Successes?
AUDIT_ACCESS_FAIL ON ! Audit Fails?
AUDIT_WARNING_PASS OFF ! Write Success, If Warning
AUDIT_WARNING_FAIL OFF ! Write Fail, If Warning
WARNING_MODE OFF ! Warning mode
If the above XYGATEOS rule is in place, then everyone will be able to Read and
Execute the XYGATEUA files. Users in ACLGROUP $SYSTEMS and $SECURITY will
be given all access.
1.4 Upgrading XUA and/or XTR Using the AutoInstall Script
The AutoInstall script is designed for an easy upgrade of the XUA server pieces by
providing default run-time parameters which can be changed later. The AutoInstall
script will locate the current environment and upgrade the software to the most recent
version without changing the already installed parameter and data repository values.
1.4.1 Before You Begin
Before running this AutoInstall script, review the preparations listed below and become
familiar with the subsection “Using the AutoInstall Script Tool” described on page 4.
1. Locate the distributed subvol (DSV) ZXYPROUA. The CD or DVD setup program
defaults to placing the software on the host in $SYSTEM.ZXYPROUA.
You should not run the AutoInstall script from the DSV because running the script
changes values inside files in that location. DUP the files to another location and
run the installation software from that other location so that the installation software
can be refreshed to its original state if the need arises.