The log-on procedure requires that users identify themselves to the system. User identification always involves entering a usercode.
The system accepts the usercode if it is defined in the USERDATAFILE and if it is not marked in the USERDATAFILE as SUSPENDED.
Identification can also involve entering any combination of the following items:
-
A password
-
An accesscode
-
An accesscode and an accesscode password
-
A chargecode
-
A second authentication factor
Each of these items is defined or specified in the USERDATAFILE. For information on how the items are entered, refer to the System Software Utilities Operations Reference Manual.
Log-On Identification Items explains the log-on identification items.
Table 12. Log-On Identification Items
|
The identification item . . . |
Is used to . . . |
|---|---|
|
Password |
Verify the user's right to use the usercode. A usercode can have
If one or more passwords are associated with a usercode, the user must enter one of those passwords during log-on. The security administrator can use the SECOPT (Security Options) system command to Most terminal emulators support the protected field feature. For more information about the SECOPT command, see Security Configuration. |
|
Accesscode |
Identify the user as having access rights to those files guarded by a guard file that specifies that accesscode. If ACCESSCODENEEDED is specified in the USERDATAFILE for the usercode, a user logging on with that usercode must enter an accesscode. |
|
Accesscode Password |
Verify the right of a user to enter an accesscode in the same way a password verifies the right to use a usercode. If an accesscode password is associated with an accesscode in the USERDATAFILE, the user must enter that password at the time he or she enters the accesscode. Accesscode passwords can be entered in a protected-video field that is provided on the accesscode entry screen. |
|
Chargecode |
Identify the user as a member of a charge group for accounting purposes. Chargecodes are intended to provide a mechanism for linking a user to the amount of system time he or she uses. This information is then available for billing system use. If CHARGEREQ is specified in the USERDATAFILE for the usercode, a user who logs on under that usercode must enter a chargecode. If CHARGEREQ is not specified in the USERDATAFILE for a usercode, entering a chargecode is optional for a user who logs on under that usercode. |
|
Second Authentication Factor |
Supply authentication information supplied to user out-of-band. If MFAREQUIRED is specified in the USERDATAFILE for the usercode and the MFA security option is enabled, the form of the second authentication factor is controlled by the MFAPROTOCOL specification in the USERDATAFILE. |
