IBM 2 Computer Hardware User Manual


 
CCA Release 2.54 Access_Control_Initialization
Access_Control_Initialization (CSUAACI)
Platform/
Product
OS/2 AIX Win NT/
2000
OS/400
IBM 4758-2/23 X X X X
The Access_Control_Initialization verb is used to initialize or update parameters
and tables for the Access-Control system in the 4758 Cryptographic Coprocessor.
You can use this verb to perform the following services:
Load roles and user profiles
Change the expiration date for a user profile
Change the authentication data, such as a passphrase, in a user profile
Reset the authentication failure count in a user profile.
You select which service to perform by specifying the corresponding keyword in the
input rule-array. You can only perform one of these services per verb call.
Restrictions
None
Format
CSUAACI
return_code Output Integer
reason_code Output Integer
exit_data_length In/Output Integer
exit_data In/Output String exit_data_length bytes
rule_array_count Input Integer one, two, or three
rule_array Input String
array
rule_array_count * 8 bytes
verb_data_1_length Input Integer
verb_data_1 Input String verb_data_1_length bytes
verb_data_2_length Input Integer
verb_data_2 Input String verb_data_2_length bytes
Parameters
For the definitions of the return_code, reason_code, exit_data_length, and exit_data
parameters, see “Parameters Common to All Verbs” on page 1-11.
rule_array_count
The rule_array_count parameter is a pointer to an integer variable containing
the number of elements in the rule_array variable. The value must be one,
two, or three for this verb.
rule_array
The rule_array parameter is a pointer to a string variable containing an array of
keywords. The keywords are eight bytes in length, and must be left-justified
and padded on the right with space characters. The rule_array keywords are
shown below:
Chapter 2. CCA Node-Management and Access-Control 2-21