Previous Topic: mfsd

Next Topic: package


OS_User

The tokens in the [OS_User] section define the settings used by CA Access Control for enterprise users and enterprise groups.

create_user_in_db

Specifies whether CA Access Control creates an XUSER record for a user who is not defined to CA Access Control, when that user logs in.

Note: This setting applies only if you use enterprise users (osuser_enabled is set to 1).

Limits: yes, no

Default: yes

nonunix_unabgroup_enabled

Specifies whether CA Access Control supports non UNIX groups of users in the UNAB database.

Limits: yes, no

Default: no

nonunix_ldapgroup_enabled

Specifies whether CA Access Control supports non UNIX groups of users, located on LDAP servers.

Limits: yes, no

Default: no

osuser_enabled

Specifies whether enterprise users and groups are enabled.

Limits: yes, no

Default: yes

UserCache_groups_max

Defines the maximum number of groups in the runtime user cache table.

Default: 1000

UserCache_max

Defines the maximum number of entries in the runtime user cache table.

Default: 20000

UserCache_timeout

Defines the interval (in minutes) before a record is removed from the runtime user cache table.

Default: 60

verify_osuser

Specifies whether CA Access Control verifies that a user exists in an enterprise store before it creates an enterprise user record (XUSER) in CA Access Control.

Limits: no, CA Access Control lets you create an enterprise user record only if that user is defined in the enterprise user store; yes, CA Access Control always lets you create an enterprise user record.

Default: no