topic Re: System privilege using sylogin.com in Operating System - OpenVMS

System privilege using sylogin.com

Sentosa — Thu, 03 Aug 2006 06:00:23 GMT

Hi all,

As a bug found from the emulation software (eXcursion), I am writing a DCL to check the password expired and prompt the user to change the password. My DCL also include a C program which use $getuai to check the pwd change date and pwdlifetime from sysuaf.

My DCL will be executed within the sylogin.com.

I just want to know if a no privilege user login, any privilege account will be used to executed my DCL/sylogin.com in the system?

Thanks,

Re: System privilege using sylogin.com

Ian Miller. — Thu, 03 Aug 2006 06:07:59 GMT

According to the system service ref man for $GETUAI

Required Access or Privileges
No privilege---Allows access to any UAF record whose UIC matches that of the requester.
You need read access to the UAF to look up any information other than your own.

Re: System privilege using sylogin.com

Ian Miller. — Thu, 03 Aug 2006 06:10:56 GMT

have a look at
http://h71000.www7.hp.com/doc/82FINAL/4527/4527pro_069.html#jun_321
especially the notes about the pwd expired flag.

Basically a normal user should be able to read your own record.

Whats the problem with excursion? I guess its due to its use of rexec

Re: System privilege using sylogin.com

Sentosa — Thu, 03 Aug 2006 08:39:49 GMT

The problem:
If you login into system through excusion, it cannot prompt user to change the password when the password expires.

One more question, mc authorize or mc sysgen, what is the meaning of mc?

thanks

Re: System privilege using sylogin.com

Kris Clippeleyr — Thu, 03 Aug 2006 08:47:08 GMT

Sentosa,

Regarding your question about "mc", please see:
http://www.decus.de:8080/www/eng/vms/qaa/mcr.htmlx

Regards,
Kris (aka Qkcl)

Re: System privilege using sylogin.com

Ian Miller. — Thu, 03 Aug 2006 08:48:26 GMT

mc abbreviated version of MCR.
A depreicated command, left over from the RSX compatability stuff, which basically means
RUN but defaults to SYS$SYSTEM: and allows the passing of a command line.

Re: System privilege using sylogin.com

Art Wiens — Thu, 03 Aug 2006 09:20:10 GMT

I believe MCR stood for Monitor Console Routine. And at the time, I believe you could only run certain programs from the console, such as Authorize and NCP ... you needed a "special" way to invoke them, ergo MCR.

Or that just be my faded interpretation of how things worked a long time ago.

Cheers,
Art

Re: System privilege using sylogin.com

Sentosa — Thu, 03 Aug 2006 20:14:59 GMT

Thank you