Endpoint Administration Guide for UNIX › Managing Users and Groups › Guidelines for Managing Accessors in Enterprise Stores › Enable or Disable the Creation of XUSER Records at Enterprise User Login

Enable or Disable the Creation of XUSER Records at Enterprise User Login

If CA Access Control is enabled to use enterprise users, by default it creates a record (in the XUSER class) for a user when that user logs in. Sometimes you do not want this, for example, if thousands of users log on at the same time each day.

To prevent CA Access Control creating XUSER records when users log in, change the value of the configuration setting create_user_in_db to 0 (zero). To re-enable this behavior set the value to 1 (one).

Example: Disable the Automatic Creation of XUSER Records on Enterprise User Login on Windows

The following registry setting disables the automatic creation of an enterprise user record in CA Access Control on Windows:

• Key: HKLM\Software\ComputerAssociates\AccessControl\OS_user
• Name: create_user_in_db
• Type: REG_DWORD
• Value: 0

Example: Disable the Automatic Creation of XUSER Records on Enterprise User Login on UNIX

The following commands stop CA Access Control, disable the automatic creation of a XUSER record on UNIX, and restart CA Access Control:

secons -s
seini -s OS_User.create_user_in_db 0
seload