Your Browser is not longer supported

Please use Google Chrome, Mozilla Firefox or Microsoft Edge to view the page correctly
Loading...

{{viewport.spaceProperty.prod}}

SHOW-LOGON-DEFAULTS Output default values for protection attributes

Domain:

USER-ADMINISTRATION

Privileges:

USER-ADMINISTRATION

This command enables the global system user administrator (owner of the USER-ADMINISTRATION privilege) to display default protection attributes for access control which were defined with /SET- or /MODIFY-LOGON-DEFAULTS.

SHOW-LOGON-DEFAULTS

PUBSET = *ALL / list-poss(2000): *HOME / <cat-id 1..4>

,OUTPUT = list-poss(2): *SYSOUT / *SYSLST

PUBSET = *ALL / list-poss(2000): *HOME / <cat-id 1..4>
Specifies the pubset whose user catalogs contain the default access control attributes.

PUBSET = *ALL
All connected pubsets are evaluated.

PUBSET = *HOME
Only the user catalog of the HOME pubset is evaluated.

PUBSET = <cat-id 1..4>
The user catalog of the specified pubset is evaluated.

OUTPUT =
Defines the output medium for the information.

OUTPUT = *SYSOUT
The system file SYSOUT (in dialog the terminal) is output.

OUTPUT = *SYSLST
Output is to the system file SYSLST.

Command return codes

(SC2)

SC1

Maincode

Meaning


0

CMD0001

Command executed without errors

2

0

SRM6001

Command executed with a warning


32

SRM6020

System error during command execution


64

SRM6040

Semantic error during command execution


130

SRM6030

Command cannot be executed at the present time


Example: Outputting the default procetion attributes

/show-logon-defaults

LOGON DEFAULT PROTECTION ON PUBSET A

 EXPIRATION DATE:     180 DAYS          EXPIRATION WARNING:  30
 PASSWORD:
     MANAGEMENT:      USER CHANGE ONLY
     MINIMAL LENGTH:  2                 MINIMAL COMPLEXITY:  1
     LIFETIME:        90  DAYS          INITIAL LIFETIME:    3   DAYS
     UNLOCK EXPIR:    BY USER           EXPIRATION WARNING:  15
     PASSWORD MEMORY: YES
     PERIOD:          7     DAYS
     CHANGES/PERIOD:  10
     BLOCKING TIME:   56    DAYS
 SUSPEND:             YES
     COUNT:           5                 OBSERVE TIME:        15    MINUTES
     SUBJECT:         USERID            SUSPEND TIME:        30    MINUTES
 INACTIVITY:          YES
     LIFETIME:        12  MONTHS
 DIALOG ACCESS:       YES
 BATCH ACCESS:        YES
 OPERATOR ACCESS TERM:YES
 OPERATOR ACCESS PROG:YES
 OPERATOR ACCESS CONS:YES
 POSIX RLOGIN ACCESS: YES
 POSIX REMOTE ACCESS: YES
 NET DIALOG ACCESS:   YES

Output in S variables

Output information

Name of the S variable

T

Contents

Condition

Access control active in batch
mode

var(*LIST).BATCH.ACCESS

S

*NO
*YES


System access control active in
batch mode

var(*LIST).DIALOG.ACCESS

S

*NO
*YES


Expiration date of the user ID

var(*LIST).EXPIR-DATE

S

*NONE
<integer 0..366>


Dimension of the expiration date of
the user ID

var(*LIST).EXPIR-DIM

S

’’
*DAYS


Time (specified in days) as of
which a warning of expiration for
the user ID is issued

var(*LIST).EXPIR-WARN

I

<integer 0..366>


Dimension of inactivity limit

var(*LIST).INACTIVITY.DIM

S

’’
*DAYS
*MONTHS


Inactivity limit

var(*LIST).INACTIVITY.LIFETIME

I

<integer 1..366>


Inactivity limit active

var(*LIST).INACTIVITY.PAR

S

*NO
*YES


Access control in network
interactive mode active

var(*LIST).NET-DIALOG.ACCESS

S

*YES
*NO


Access control active for console
access

var(*LIST).OPER-CONS.ACCESS

S

*YES
*NO


Authentication procedure for
programmed operator active
(operating mode)

var(*LIST).OPER-PROG.ACCESS

S

*NO
*YES


Authentication procedure for
dialog partner connected via
terminal active (operating mode)

var(*LIST).OPER-TER.ACCESS

S

*NO
*YES


Blocking time for passwords

var(*LIST).PASS.BLOCKING-TIME

I

<integer 1..32767>


Number of permitted password
changes

var(*LIST).PASS.CHA-PER-PER

I

<integer 1..100>


Dimension of password lifetime

var(*LIST).PASS.DIM

S

’’
*DAYS
*MONTHS


Time (specified in days) as of
which a warning of expiration is
issued

var(*LIST).PASS.EXPIR-WARN

I

<integer 1..366>


Dimension of the first lifetime of the
password

var(*LIST).PASS.INIT-DIM

S

’’
*DAYS


First lifetime of the password

var(*LIST).PASS.INIT-LIFETIME

S

*STD
<integer 1..366>


Lifetime of the password

var(*LIST).PASS.LIFETIME

S

*UNLIM
<integer 1..366>


Authorization for management of
the password

var(*LIST).PASS.MANAGE

S

*BY-ADM
*BY-USER
*USER-CHA-ONLY


Minimum complexity of the
password

var(*LIST).PASS.MIN-COMPLEX

S

*NONE
<integer 1..4>


Minimum length of the password

var(*LIST).PASS.MIN-LEN

S

*NONE
<integer 1..8>


List of password changes active

var(*LIST).PASS.PASS-MEMORY

S

*NO
*YES


Period (in days) for which the
restriction of the number of
password changes applies

var(*LIST).PASS.PER

I

<integer 1..32767>


Authorization to replace an expired
password

var(*LIST).PASS.UNLOCK-EXPIR

S

*BY-ADM
*BY-USER


Access control for POSIX remote
access active

var(*LIST).POSIX-REM.ACCESS

S

*YES
*NO


Access control for POSIX access
via rlogin active?

var(*LIST).POSIX-RLOG.ACCESS

S

*NO
*YES







Catalog ID of the pubset

var(*LIST).PUBSET

S

<cat-id 1..4>







Permitted number of failed
attempts

var(*LIST).SUSPEND.COUNT

I

<integer 0..32767>


Dimension of observation time

var(*LIST).SUSPEND.OBS-DIM

S

’’
*MINUTES
*HOURS


Observation time

var(*LIST).SUSPEND.OBS-TIME

I

<integer 0..32767>


Suspension active

var(*LIST).SUSPEND.PAR

S

*NO
*YES


Subject to be suspended

var(*LIST).SUSPEND.SUBJECT

S

*USER-ID
*INITIATOR


Dimension of suspension time

var(*LIST).SUSPEND.SUS-DIM

S

’’
*MINUTES
*HOURS


Suspension time

var(*LIST).SUSPEND.SUS-TIME

I

<integer 0..32767>