Operating System - OpenVMS
1748261 Members
3662 Online
108760 Solutions
New Discussion юеВ

getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

 
SOLVED
Go to solution
Joseph Huber_1
Honored Contributor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

My goodness, You really should read AT LEAST the DCL basics manual before starting to play system manager!

The foreign command verb definition is:
GETUAI:=$SYS$COMMON:[SYSMGR.TEST.GETUAI]GETUAI.EXE

The help file specification is:
SYS$COMMON:[SYSMGR.TEST.GETUAI]GETUAI.HLB

The leading $ is NOT part of the file specification.
So: HELP/LIBR=SYS$COMMON:[SYSMGR.TEST.GETUAI]GETUAI.HLB
http://www.mpp.mpg.de/~huber
Thanassis Papadimitriou
Frequent Advisor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

Thank you all very much for your help.

I wish I had time to read in detail all the docs related to system management.

My role is not dedicated only to OpenVMS system management! So, any input is appreciated!

A last question about getuai. In case that I would like to extract all usernamea that have a password lifetime set to 60 days. Is it possible to retrieve these usernames with a single getuai command or do I have to write down a short program to loop throughout all uaf lines. Someone told me that getuai is not used to filter uaf records!!

Joseph Huber_1
Honored Contributor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

As far I see, GETUAF has no selection criteria, and no wildcard functionality.

The other mentioned freeware program, UAF, does have /SELECT= and wildcard functionality,
on the other hand does not return the result in a DCL symbol, but just displays on terminal or file. Get the UAF program, it has examples in the help showing how to use /select=...
http://www.mpp.mpg.de/~huber
Joseph Huber_1
Honored Contributor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

The UAF query for a PWDLIFE of 60 days would look like:
uaf/select=pwdlife=(59-0,60-00:00)/display=(username,pwdlifetime)

http://www.mpp.mpg.de/~huber
Thanassis Papadimitriou
Frequent Advisor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

I have downloaded uaf.gz file into the following directory:

SYS$COMMON:[SYSMGR.TEST.UAF]

I unzipped uaf.gz file and all files where extracted in the afore-mentioned directory. I have found compile.com file. Should I execute it, prior initiating a query against uaf records?
Joseph Huber_1
Honored Contributor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

look if in Your directory there are files like
uaf.vax_exe or uaf.alpha_exe: depending on the CPU architecture of Your system, define a foreign command
uaf;=$sys$common:[...]uaf.xxx_exe

If You are on an itanium system, yes, You have to rebuild using @compile or MMS.

But be aware, this distribution is rather old and may not compile and link without corrections. Hire a consultant in this case!
http://www.mpp.mpg.de/~huber
Thanassis Papadimitriou
Frequent Advisor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

Is there a distribution of uaf.zip where we can perform select queries based on access status yes or no (/access, /noaccess) and even more the detailed access granted, such as /access /network or /access /remote?
Joseph Huber_1
Honored Contributor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

Well the access vs. noaccess could be done like:
uaf /select=(access=(noprimary,0-23,nosecondary,0-23))/match=and /display=(username,access)
and probably also the login-mode can be added in the criteria, I just could not find out the syntax yet: play with it, and HELP UAF ITEM ACCESS.
http://www.mpp.mpg.de/~huber
Thanassis Papadimitriou
Frequent Advisor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

Thank you very. Your replies solved me all inqueries I had regarding how to extract uaf reports not based on default uaf criteria.

Case is solved.
Thanassis Papadimitriou
Frequent Advisor

Re: getuai.exe for OpenVMS 7.3-1 and OpenVMS 7.3-2

My desired reports against uaf where:

1. produce a list of uaf accounts that have no access and flag disuser is not set.

2. update all uaf accounts that have pwdlifetime 90 days to 60 days.