XYGATE User Authentication Reference Manual

XYGATE
®
User Authentication
™
(XUA) 1.85 Reference Manual
Chapter 1. Installing XUA
XYPRO Technology Corporation 29 Proprietary and Confidential
1.8 Configuring XUA Userids and Aliases
All XYGATE modules use standard Guardian userids and Safeguard aliases. No
XYGATE module requires that you create a new user database.
XUA allows you to enter userids as either user names or user numbers, but the two
are treated somewhat differently according to the following:
• If a user number is entered, XUA will not check for the presence of the userid on
that node.
• If userids are entered as user names, all XYGATE modules will check for the
presence of that user name on the node where they are running. If the user name
does not exist, it causes a syntax warning. Therefore, any rule (UAGROUP,
PQGROUP or FOGROUP, for example) that includes that userid, either specifically
or within an ACLGroup, will be ignored. Always use XCF or the XUA_EDIT_ACL
macro (page 297) to see any syntax warnings before you attempt to put the file into
production. XYPRO Technology strongly recommends that you always use these
macros when updating the UAACL file.
Note: If you do not have the same userids on every node relevant to a particular
UAGROUP, for example, then always enter users as user numbers.
Aliases are always treated as user names, so aliases must always exist on the node
where the product is running.
Use comments to include the user names if you wish:
ACLGROUP $BASE24 \*.30,* !\*.B24.*
NETUNDERLYING:\*.30,255 !\*.B24.MGR
\*.255,30 !\*.SUPER.B24
alias:"\*.b24-kim" ! Kim’s alias to SUPER.B24
Use the node-conditional syntax to include the correct userids and aliases for a given
node. Refer to Chapter 2, “Node-Conditional Processing in the UAACL File” for more
information.