 |
» |
|
|
|
The following command is used to display the status of account attributes and security provisions for files and devices. You can display account attributes by entering the MPE/iX command :LISTACCT.
>LISTACCT [acctset] [,listfile] [;PASS]
|
where acctset specifies the name of an account, ,listfile specifies a device that will receive the output listing, and ;PASS specifies that the password will be displayed. If an unauthorized user enters ;PASS, asterisks (*) are displayed in place of sensitive information. The listing will include information on the password aging values if appropriate and all of the relevant details.
To list all of the attributes, including the password, of an account named MARKETS, enter: | | | |  | NOTE: The MPE/iX commands that display passwords (:LISTUSER, :LISTGROUP, and :LISTACCT) will not display passwords when they are in encrypted form. | | | | |
Discussion | |
The three listing commands are: :LISTACCT lists account attributes. :LISTGROUP lists group attributes. :LISTUSER lists user attributes.
A System Manager (SM capability) can specify any account, group, and user on the system. An Account Manager (AM capability) can specify any group or user in his or her logon account. A general user (one without SM or AM capabilities) can specify only his or her own logon account, group, and user name. Information about passwords can be examined according to the following rules:
The password is displayed when ;PASS is specified by the System or Account Manager in the following way: The password state (*ENCRYPTED*, REQUIRED and EXPIRED) are displayed when ; PASS and ;FORMAT=DETAIL are specified by the System or Account Manager in the following way:
LISTUSER MGR;PASS;FORMAT=DETAIL
|
The password aging value is displayed when ;FORMAT=DETAIL is specified by all users in the following way:
LISTUSER MGR;FORMAT=DETAIL
|
Only System and Account Managers can use wildcard characters (#, ?, and @) when specifying group names. Any user can use the character @ when specifying file names. Only System Managers can use wildcards when specifying account names.
|
