Security

Top  Previous  Next

auth_mode

Specifies the mode that XCICS will use to authenticate the users at SIGNON time.

XCICS supports 4 authentication modes:

mode

description

basic

Users are defined in the XCICS configuration file, with the "define user" directive and/or with the "snt_loader" exit_program. Clear text passwords are directly declared in the user definition statement with the "password" attribute. Users cannot change their passwords.

passwd

Similar to the basic mode, but passwords are encrypted stored in the file defined by the "set passwd_file" directive. Users can change their passwords.

ldap

Users are defined with "define user" directive and/or loaded from an LDAP server. The SIGNON is directly authenticated by the LDAP server. User may change their password according to the LDAP server settings.

For further information, please refer to the "Security management" section.

user

Users are defined with "define user" in the configuration file and/or with the "snt_loader" exit_program. They are authenticated by a an user provided exit program of type "user_signon". User may also change their password if an exit program of type "user_chpasswd" is defined. 

For further information, please refer to the "Exit programs" section and to the "Customization Guide"

Syntax

set auth_mode=(basic|passwd|ldap|user);

passwd_file

Specifies the path of the external password files. If defined the password are stored on the specified file and my be dynamically changed by users

Syntax

set passwd_file="<path>";

single_signon

Specifies if a single user may sign on from more than one terminal concurrently. By default multiple login are allow for a single user.

Syntax

set single_signon=(yes|no);

mixedcase_passwords

Specifies if a mixed case passwords may be entered by users at sign-on time (CESN). The default value is "no".

Syntax

set mixedcase_passwords=(yes|no);

default_user

Specifies terminal default user. default_user and default_opid are mutually exclusive. default_user should be normally used.

No default is provided.

Syntax

set default_user=<username>

utils_protection_level

Specifies protection level for utility transactions, such CESN.

The default is 64.

Syntax

set utils_protection_level=<value>

admin_protection_level

Specifies protection level for administrative transactions.

The default is 64.

Syntax

set admin_protection_level=<value>