Previous Topic: Security ConsiderationsNext Topic: Modifying the Initial Programs


User Profile Extension Attributes

The main use for the Toolkit user profile extension attributes is to control the initiation of interactive jobs, that is, "signing on". Any user profile having the Toolkit initial program, YINLPGM, as its initial program can make use of the extension attributes.

The Toolkit initial program - which you may alter or enhance - will do the following:

  1. Retrieve the user profile name.
  2. Get the user profile extension attributes for the user.

    If the user profile has no extension attributes, send a diagnostic message (YUS0001), and terminate the job.

  3. Check that the user is allowed to sign on.

    If the user profile is suspended, send a diagnostic message (YUS0014), and terminate the job.

    If the user’s profile has a password expiry date call the password checking program, YINLPGMPWD. This program, and the password expiry control values, are described below in the section on Password validation.

    If the password expiry check fails, sign off using the i OS SIGNOFF command.

    If the password expiry check succeeds, proceed.

  4. Set the initial library list for the user.

    If the initial library is not found, send a diagnostic message and terminate the job.

    If the initial library list contains libraries that either do not exist, or that the user is not authorized to use, send a diagnostic message and terminate the job.

  5. Execute the specified action for the user:

    Either: display the specified initial menu for the user.

    Or: execute the program specified by the initial menu option for the user. See Using Different Control Programs below.

  6. Return. Subsequent processing will depend on the value specified for the INLMNU parameter on the profile:

    If INLMNU(*SIGNOFF) is specified, the job will terminate.

    If any other value is specified for INLMNU, the nominated i OS menu will be displayed.