selang Reference Guide › The selang Command Language › selang Command Syntax

selang Command Syntax

Each selang command performs a specific action on the CA Access Control database. The syntax of a selang command is:

commandname parameters

The command name tells CA Access Control which command to execute. You usually follow the command with one or more parameters that supply CA Access Control with additional information needed to execute the command.

The syntax of a selang parameter is:

parameterName[(arguments)]

The parameter name identifies the parameter to CA Access Control. Many parameters require arguments that provide CA Access Control with the information necessary to process the parameter. Some parameters accept more than one argument. When more than one argument is specified, separate the arguments with a comma or a space. The argument of a parameter may itself be a parameter.

To remove a record property when a string defines the argument, simply enter the property with empty parenthesis (). In some cases, you can use an asterisk (*) as an argument, to cover all possible values for that argument. If you use an asterisk, the asterisk does not override earlier or later commands that give specific values to the same argument. Moreover, if the argument is a file name, you can use a wildcard as part of a file name pattern. The wildcards are * (for zero or more characters) and ? (for one character).

In the UNIX environment, user‑supplied information is case-sensitive and can consist of both lowercase and uppercase letters. For example, you may specify the full name of the user whose user ID is user53 as Mike Jones. Windows does not recognize case-sensitive information but still saves it. If you administer a remote Windows host from a UNIX workstation, UNIX will look for user‑supplied information as stored. For example, if a user is identified in a Windows environment as Mike Jones, you may enter his name as mike jones when administering the local CA Access Control database. However, if you want to administer the database from a remote UNIX machine, you must enter his name as Mike Jones.