Re: $SETUAI() Query/Problem

From: Richard B. Gilbert (rgilbert88_at_comcast.net)
Date: 01/31/04 

Date: Fri, 30 Jan 2004 18:13:50 -0500

I seem to recall that the logicals used by SYSUAF must be defined in
EXECUTIVE_MODE. They need not be in the system table but must be
/EXEC. This applies to SYSUAF, RIGHTSLIST, NETPROXY and NET$PROXY.

covendotartdottalk21dotcom wrote:

>I was wondering whether or not anyone might be able to point me in the
>direction of the error of my ways?
>
>I'm writing some software that is intended to run on NODEA and change
>passwords on NODEB, but avoiding sending the password in cleartext
>form across the network to NODEB (i.e. NOT some kind of remote
>submission of MC AUTHORIZE commands).
>
>When I define SYSUAF locally on NODEA within DCL (making sure I do
>/PROCESS to avoid causing anyone else problems) to be
>NODEB::SYS$SYSTEM:SYSUAF.DAT, I can then quite happily do MC
>AUTHORIZE, and examine/modify NODEB's UAF (NODEB has a proxy defined
>for the account I am using on NODEA).
>
>>From within a program (DEC C), I can quite happily create a logical
>name of SYSUAF with a value of NODEB::SYS$SYSTEM:SYSUAF.DAT in the
>process name table, in supervisor mode on NODEA with:
>
> SYS$CRELNM() (if I give the account on NODEA the SYSNAM priv)
> LIB$SET_LOGICAL() (if the account on NODEA does not have SYSNAM
> priv)
>
>or in executive mode on NODEA with:
>
> SYS$CRELNM() (if I give the account on NODEA the SYSNAM priv)
>
>
>However, when I attempt to use $SETUAI() or $GETUAI, the system
>services always seem to pick up the definition in the SYSTEM name
>table, not the PROCESS one.
>
>Am I trying to achieve the impossible, or is there something that
>you need to set up in order to get $SETUAI()/$GETUAI() to play
>ball?
>
>My point is that if you define the logical, then you can use it
>with MC AUTHORIZE and it works, but not if you call the system
>services directly - i.e. inconsistent behaviour.
>
>I've probably missed out some step that I can't see in any of
>the documentation I've looked at (specifically system services and
>RTL LIB$ manuals, I didn't check if the OVMS Security manual
>discusses $SETUAI/$GETUAI calls, and I'm not in a position to
>check that just now), so I'm quite happy to be corrected!
>
>
>Regards,
>
>
>Mark.
>
>
>
>

Relevant Pages

  • Re: $SETUAI() Query/Problem
    ... > names on NODEA to access the files on NODEB? ... where NODEB is defined in the DECnet database on NODEA, ... SYS$SYSTEM:SYSUAF.DAT is the correct location of the UAF file on NODEB, ... image rundown, so when returned back to DCL, if I do SHOW LOG SYSUAF ...
    (comp.os.vms)
  • Re: $SETUAI() Query/Problem
    ... > I'm writing some software that is intended to run on NODEA and change ... > form across the network to NODEB (i.e. ... > for the account I am using on NODEA). ... Instead of trying to change passwords over the net, ...
    (comp.os.vms)