MODIFY-USER-ATTRIBUTES

Modify user catalog entry

Domain:	ACCOUNTING USER-ADMINISTRATION
Privileges:	USER-ADMINISTRATION STD-PROCESSING

This command modifies the attributes of a BS2000 user ID in the user catalog. The following users may execute the command:

• Owners of the USER-ADMINISTRATION privilege for all BS2000 user IDs.

• Group administrators for BS2000 user IDs which are assigned to and subordinate to their groups.

Only the part of the command that is relevant to POSIX is shown in the syntax diagram below. The command is described in full in the manuals "SECOS - Access Control" [9] and "BS2000 Commands" [28].

Additionally the EDIT-USER-ATTRIBUTES command is available which can be used to show and modify the current settings.

Format

MODIFY-USER-ATTRIBUTES                                                                                                                       

. . .
,ACCOUNT-ATTRIBUTES = *UNCHANGED / *ADD(...) / *MODIFY(...) / *REMOVE(...)
	*ADD(...)
		|	ACCOUNT = <alphanum-name 1..8>
		|	. . .
	,POSIX-RLOGIN-DEFAULT = *NO / *YES
	*MODIFY(...)
		|	ACCOUNT = <alphanum-name 1..8>
		|	. . .
		|	,POSIX-RLOGIN-DEFAULT = *UNCHANGED / *NO / *YES
	*REMOVE(...)

Operands

ACCOUNT-ATTRIBUTES = ... / *ADD(...) / *MODIFY(...) / ...

Determines the accounting data of a BS2000 user ID.

ACCOUNT-ATTRIBUTES = *ADD(...)
A new account number and specific attributes are entered for the BS2000 user ID.

ACCOUNT = <alphanum name 1..8>
Account number of the BS2000 user ID which is added to the user catalog and to which the following specifications refer.

. . .

POSIX-RLOGIN-DEFAULT =
Determines whether the specified account number is used for accounting for the remote login session.

POSIX-RLOGIN-DEFAULT = *NO
The specified account number is not used for accounting.

POSIX-RLOGIN-DEFAULT = *YES
The specified account number is used for accounting.

ACCOUNT-ATTRIBUTES = *MODIFY(...)
The attributes of an entered account number of the BS2000 user ID are modified.

ACCOUNT = <alphanum name 1..8>
Account number of the BS2000 user ID for which the subsequent values are modified in the user catalog.

. . .

POSIX-RLOGIN-DEFAULT =
Determines whether the account number to be modified is used for accounting for the remote login session.

POSIX-RLOGIN-DEFAULT = *UNCHANGED
The value set up to now is retained.

POSIX-RLOGIN-DEFAULT = *NO
The account number is not used for accounting.

POSIX-RLOGIN-DEFAULT = *YES
The account number is used for accounting.

Within a BS2000 user ID, the account number for remote login is unique. User administration automatically compares the number with the existing account numbers.

The account number for remote login can also be specified for the accounting for a BS2000 session and, as a result, a BS2000 user ID can manage with one single account number.

POSIX-RLOGIN-DEFAULT=*YES is required for user IDs which wish to have remote access to POSIX (rlogin or Telnet access, rsh and rcp commands) or to use at, crontab or batch.

If no account number for remote login is specified, access via remote login is refused, unless the user ID requesting access is TSOS.