Endpoint Administration Guide for UNIX › Controlling Login Commands › Controlling Generic Login Applications › Generic Login Program Interception

Generic Login Program Interception

With regular login restrictions, the activated rules are obvious; if a LOGINAPPL object that has the intercepted login program specified for the loginpath property exists in the database, the rules for that object would apply.

However, for generic LOGINAPPL objects, CA ControlMinder does the following:

1. seosd searches for an exact match for the intercepted login application. (A matching login path for the LOGINAPPL object.) If found, the rules for that object apply.
2. If not found, the search continues for a LOGINAPPL object with a generic login path that matches.
3. If there is more than one match, the rules for the object with the more specific match apply.