Securing System Resources › Securing Signon

Securing Signon

About Signon

The signon resource controls access to DC systems, whether the signon is explicit or implicit. The security option you specify for signon determines whether password validation is enforced by the external system, internally, or not at all.

Note: For more information about signon processing, see the chapter Signon Processing.

Until you secure the signon resource, any user can sign on to any system in the domain.

How to Secure Signon

To secure signon internally, include an entry in the SRTT:

#SECRTT    TYPE=ENTRY,                                        X
      RESTYPE=SGON,                                           X
      SECBY=INTERNAL

To secure signon externally, include an entry in the SRTT:

#SECRTT    TYPE=ENTRY,                                        X
      RESTYPE=SGON,                                           X
      SECBY=EXTERNAL,                                         X
      Additional parameters required

Note: For more information, see #SECRTT.

Granting System Signon Privilege

To control access to a system, you grant signon privilege to a user. You cannot grant signon to a group.

Note: For more information, see the following sections in the chapter Syntax for Securing System Resources:

• CREATE RESOURCE
• DROP RESOURCE

When you grant signon, you can associate a system profile with the user.

Note: For more information about system profiles, see the CA IDMS System Tasks and Operator Commands Guide.