Operating System - OpenVMS
1748180 Members
4141 Online
108759 Solutions
New Discussion юеВ

Re: System privilege using sylogin.com

 
SOLVED
Go to solution
Sentosa
Frequent Advisor

System privilege using sylogin.com

Hi all,

As a bug found from the emulation software (eXcursion), I am writing a DCL to check the password expired and prompt the user to change the password. My DCL also include a C program which use $getuai to check the pwd change date and pwdlifetime from sysuaf.

My DCL will be executed within the sylogin.com.

I just want to know if a no privilege user login, any privilege account will be used to executed my DCL/sylogin.com in the system?

Thanks,
7 REPLIES 7
Ian Miller.
Honored Contributor
Solution

Re: System privilege using sylogin.com

According to the system service ref man for $GETUAI

Required Access or Privileges
No privilege---Allows access to any UAF record whose UIC matches that of the requester.
You need read access to the UAF to look up any information other than your own.
____________________
Purely Personal Opinion
Ian Miller.
Honored Contributor

Re: System privilege using sylogin.com

have a look at
http://h71000.www7.hp.com/doc/82FINAL/4527/4527pro_069.html#jun_321
especially the notes about the pwd expired flag.

Basically a normal user should be able to read your own record.

Whats the problem with excursion? I guess its due to its use of rexec
____________________
Purely Personal Opinion
Sentosa
Frequent Advisor

Re: System privilege using sylogin.com

The problem:
If you login into system through excusion, it cannot prompt user to change the password when the password expires.

One more question, mc authorize or mc sysgen, what is the meaning of mc?

thanks
Kris Clippeleyr
Honored Contributor

Re: System privilege using sylogin.com

Sentosa,

Regarding your question about "mc", please see:
http://www.decus.de:8080/www/eng/vms/qaa/mcr.htmlx

Regards,
Kris (aka Qkcl)
I'm gonna hit the highway like a battering ram on a silver-black phantom bike...
Ian Miller.
Honored Contributor

Re: System privilege using sylogin.com

mc abbreviated version of MCR.
A depreicated command, left over from the RSX compatability stuff, which basically means
RUN but defaults to SYS$SYSTEM: and allows the passing of a command line.
____________________
Purely Personal Opinion
Art Wiens
Respected Contributor

Re: System privilege using sylogin.com

I believe MCR stood for Monitor Console Routine. And at the time, I believe you could only run certain programs from the console, such as Authorize and NCP ... you needed a "special" way to invoke them, ergo MCR.

Or that just be my faded interpretation of how things worked a long time ago.

Cheers,
Art
Sentosa
Frequent Advisor

Re: System privilege using sylogin.com

Thank you