USER_SECURITY - UCTL Server configuration option

Owned by Stonebranch (Deactivated)
Feb 06, 2023

Description

The USER_SECURITY option specifies whether or not to user security and, if so, the security method.

If user security is activated, the remote Universal Control Manager requesting command execution is required to supply a local user ID and password. The user's command is started as that user.

If user security is not activated, the user ID and password is not required from the remote user. The user's process is started with the same user ID as Universal Control Server ID.

Usage

Method

Syntax

IBM i

UNIX

Windows

z/OS

Configuration File Keyword

security option

(tick)

(tick)

(tick)

(tick)

Values

option is the specification (and method) for activating user security.


IBM i

  • default
    Security is activated and uses IBM i authentication.
  • none
    Security is not activated.

UNIX

  • default
    Use UNIX default user authentication method, */etc/passwd* or */etc/shadow*.
  • inherit
    Universal Control Server will inherit the user account of the broker which started it. The user's action is performed with the same user ID as that inherited from the Broker.
  • none
    Universal Control Server will inherit the user account of the broker which started it. The user's action is performed with the same user ID as that inherited from the Broker.
  • pam
    Use the Pluggable Authentication Modules (PAM) interface.
  • trusted
    Use HP Trust Security authentication.

Windows

  • default
    User-supplied user ID and password is authenticated against the user profile.
  • inherit
    Universal Control Server will inherit the user account of the broker which started it. The user's action is performed with the same user ID as that inherited from the Broker. Not recommended.
  • none
    Universal Control Server will inherit the user account of the broker which started it. The user's action is performed with the same user ID as that inherited from the Broker. Not recommended.

z/OS

  • default
    Use z/OS SAF user authentication method. The user ID must have an OMVS segment.
  • inherit
    Universal Control Server will inherit the user account of the broker which started it. The user's action is performed with the same user ID as that inherited from the Broker. Not recommended.
  • none
    Universal Control Server will inherit the user account of the broker which started it. The user's action is performed with the same user ID as that inherited from the Broker. Not recommended.

Note

For UNIX, Windows, and z/OS: The inherit value replaces the none value. There currently are no plans to deprecate support for none, but new installs should use inherit instead of none.

Default Values

defaultAIX, HP-UX, Windows, z/OS
pamLinux, Solaris