Reference Guide › Utilities › selang Utility—Run the CA Access Control Command Line

selang Utility—Run the CA Access Control Command Line

The selang utility invokes a command shell that provides access to the CA Access Control database and the native environment. The database is updated dynamically by issuing selang commands from within the command shell.

Note: The result of the command's execution is sent to the standard output unless you include the ‑o option.

This command has the following format on UNIX:

selang [{-c command|-f file}] [{-d path|-p pmdb}] [-o file] [-r file] [-s] \
[-u user pass]
selang [-l] [-o file] [-r file] [-s] [-u user pass]

This command has the following format on Windows:

selang [{-c command|-f file}] [{-d path|-p pmdb}] [-o file] [-r file] [-s] [-v]
selang [-l] [-o file] [-r file] [-s] [-v]

‑c command

Specifies the selang command to execute. After selang executes the command, it exits.

If command contains any spaces, enclose the entire string in quotation marks. For example:

selang ‑c "showusr rosa"

‑d path

Specifies that selang commands update the database in the defined path.

Note: You can only specify a local database.

‑f file

Specifies that selang commands are read from the defined file rather than from the terminal's standard input.

As selang executes the commands in the input file, the line number of command being executed appears on the screen. The selang prompt does not appear on the screen. After selang executes the commands in file, it exits.

-h

Displays the help for this utility.

‑l

Specifies that selang updates the default local database, usually ACInstallDir/seosdb (where ACInstallDir is the directory where you installed CA Access Control).

You do not need to specify this option with -d or -p.

Note: This option replaces selang. It is only valid when seosd is not running, and only an CA Access Control administrator with sufficient native privileges to update the database files can execute it.

‑o file

Specifies that selang output is written in the specified file. Each time you invoke selang, it creates a new, empty file. If you specify the name of an existing file, selang writes over the information currently in the file.

‑p pmdb

Specifies that selang commands update the database of the defined PMDB, which must be in the local station (this is the database in the PMDB subdirectory). Changes to the database are not propagated to subscribers.

Note: This option is not valid if either sepmdd or seosd is running on the specified PMDB and is not the same as using the hosts command.

Important! Do not make changes that require propagation in this mode. If you use native mode when making updates, CA Access Control updates only the native host files (as defined in the CA Access Control configuration options).

‑r file

Specifies that selang reads the commands from the defined file. The file should consist of commands in normal selang syntax, separated by semicolons or line breaks. After executing the commands in file, selang prompts the user for input.

If you do not define a file for this option, selang uses the .selangrc file in your home directory.

‑s

Specifies that selang opens in silent mode, without displaying the copyright message.

‑u user pass

(UNIX only) Specifies a username and password for running selang.

To use this option, you must set the check_password token in the seos.ini file to yes; this causes CA Access Control to prompt you with “Enter your password” when you run selang -u. You have three attempts to login.

The token no_check_password_users in the [lang] section of the seos.ini file contains a list of users that bypass the password checking during a login to selang.

Note: If the check_password token is set to no (the default), selang does not require any passwords.

-v

(Windows only) Writes command line to output.

Usage notes:

• If -h is used, all other options are ignored.
• You cannot use the -c option with the -f option.
• You cannot use the -d option with the -p option.
• If you specify -d or -p, you do not need to specify -l.

More information:

hosts Command—Connect to a Remote CA Access Control Terminal