- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - OpenVMS
- >
- Re: UAF> show/identifier question
Operating System - OpenVMS
1752273
Members
4988
Online
108786
Solutions
Forums
Categories
Company
Local Language
юдл
back
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
юдл
back
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Blogs
Information
Community
Resources
Community Language
Language
Forums
Blogs
Go to solution
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-04-2004 10:06 AM
тАО06-04-2004 10:06 AM
I'm trying to check that some group identifiers are setup, and I came across a "problem" that I've seen before (but never had such a knowledgable group at my disposal to ask ;-).
Why can't I do this:
UAF> show/identifier/value=uic:[5651,177777]
%UAF-E-UICERR, error in UIC specification \[5651,177777]\
but I can do this:
UAF> show/identifier/value=uic:[5651,*]
Name Value Attributes
VINADV [005651,177777]
Ok, so then theoretically if wildcards work, I should be able to do this and get a list of all my group identifiers:
UAF> show/identifier/value=uic:[*,*]
%UAF-E-SHOWERR, unable to complete SHOW command
-SYSTEM-F-NOSUCHID, unknown rights identifier
Inconsistent, no?
Art
Why can't I do this:
UAF> show/identifier/value=uic:[5651,177777]
%UAF-E-UICERR, error in UIC specification \[5651,177777]\
but I can do this:
UAF> show/identifier/value=uic:[5651,*]
Name Value Attributes
VINADV [005651,177777]
Ok, so then theoretically if wildcards work, I should be able to do this and get a list of all my group identifiers:
UAF> show/identifier/value=uic:[*,*]
%UAF-E-SHOWERR, unable to complete SHOW command
-SYSTEM-F-NOSUCHID, unknown rights identifier
Inconsistent, no?
Art
Solved! Go to Solution.
2 REPLIES 2
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-04-2004 12:31 PM
тАО06-04-2004 12:31 PM
Solution
Art,
Yes it's inconsistent.
UAF> show/identifier/value=uic:[5651,*]
In this context, the "*" isn't a wildcard, it's a special token used to identify the group identifier.
Your "value=uic:[5651,177777]" fails because it IS an invalid UIC, the member number is outside the permitted range. Both group and member numbers must be in the range 0 through %o77777 (decimal 32767).
That's because it isn't a UIC, it's a group identifier. Yes, SHOW/IDENT displays it as if it were a UIC, but it isn't.
The real inconsistency is that elsewhere, the string "[5651,*]" really IS a wildcard:
UAF> SHOW/BRIEF [5651,*]
will display the UAF records for all the members of group 5651.
Note that SHOW/IDENT has other inconsistencies in the way it displays and accepts values:
UAF> SHOW/IDENT INTERACTIVE
Name Value Attributes
INTERACTIVE %X80000003
UAF> SHOW/IDENT/VALUE=IDENT=%X80000003
%UAF-E-BADVALUE, error in value specification \-2147483645\
UAF> SHOW/IDENT/VALUE=IDENT=%X3
Name Value Attributes
INTERACTIVE %X80000003
So, you need to know that the leading bit in the identifer value is actually a flag to distinguish between UIC identifiers and general identifiers (similarly bit 15 is used to flag group identifiers).
Bottom line - SHOW/IDENT is inconsistent in the way it accepts and displays identifier values. But, it's been like that since identifiers were introduced in VMS V4.0, released more than 20 years ago. It's very unlikely it will be changed now. Although it's confusing at first, it does have some value in that it shows you exactly what values you'd be dealing with if you were playing with identifiers using system services.
To your original problem. I don't think there is a simple way from within AUTHORIZE to say "show me all group identifiers". If you want to do that, use PIPE:
$ PIPE MCR AUTHORIZE SHOW/IDENT * | SEARCH SYS$PIPE ",177777]"
Yes it's inconsistent.
UAF> show/identifier/value=uic:[5651,*]
In this context, the "*" isn't a wildcard, it's a special token used to identify the group identifier.
Your "value=uic:[5651,177777]" fails because it IS an invalid UIC, the member number is outside the permitted range. Both group and member numbers must be in the range 0 through %o77777 (decimal 32767).
That's because it isn't a UIC, it's a group identifier. Yes, SHOW/IDENT displays it as if it were a UIC, but it isn't.
The real inconsistency is that elsewhere, the string "[5651,*]" really IS a wildcard:
UAF> SHOW/BRIEF [5651,*]
will display the UAF records for all the members of group 5651.
Note that SHOW/IDENT has other inconsistencies in the way it displays and accepts values:
UAF> SHOW/IDENT INTERACTIVE
Name Value Attributes
INTERACTIVE %X80000003
UAF> SHOW/IDENT/VALUE=IDENT=%X80000003
%UAF-E-BADVALUE, error in value specification \-2147483645\
UAF> SHOW/IDENT/VALUE=IDENT=%X3
Name Value Attributes
INTERACTIVE %X80000003
So, you need to know that the leading bit in the identifer value is actually a flag to distinguish between UIC identifiers and general identifiers (similarly bit 15 is used to flag group identifiers).
Bottom line - SHOW/IDENT is inconsistent in the way it accepts and displays identifier values. But, it's been like that since identifiers were introduced in VMS V4.0, released more than 20 years ago. It's very unlikely it will be changed now. Although it's confusing at first, it does have some value in that it shows you exactly what values you'd be dealing with if you were playing with identifiers using system services.
To your original problem. I don't think there is a simple way from within AUTHORIZE to say "show me all group identifiers". If you want to do that, use PIPE:
$ PIPE MCR AUTHORIZE SHOW/IDENT * | SEARCH SYS$PIPE ",177777]"
A crucible of informative mistakes
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-05-2004 07:03 AM
тАО06-05-2004 07:03 AM
Re: UAF> show/identifier question
Not entirely.
it IS an identifier but is cannot be accessed as a UIC
From authorize HELP MOD /UIC:
/UIC=value
Specifies the user identification code (UIC). The UIC value is
a group number in the range from 1 to 37776 (octal) and a member
number in the range from 0 to 177776 (octal), which are separated
by a comma and enclosed in brackets. HP reserves group 1 and
groups 300-377 for its own use.
Each user must have a unique UIC. By default, the UIC value is
[200,200].
Mind the member number: 177776 (oct).
177777 (oct) = FFFF (hex) = groupname. I guess Authorize will filter this off...
Willem
it IS an identifier but is cannot be accessed as a UIC
From authorize HELP MOD /UIC:
/UIC=value
Specifies the user identification code (UIC). The UIC value is
a group number in the range from 1 to 37776 (octal) and a member
number in the range from 0 to 177776 (octal), which are separated
by a comma and enclosed in brackets. HP reserves group 1 and
groups 300-377 for its own use.
Each user must have a unique UIC. By default, the UIC value is
[200,200].
Mind the member number: 177776 (oct).
177777 (oct) = FFFF (hex) = groupname. I guess Authorize will filter this off...
Willem
Willem Grooters
OpenVMS Developer & System Manager
OpenVMS Developer & System Manager
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.
News and Events
Support
© Copyright 2024 Hewlett Packard Enterprise Development LP