Advanced Password Services (APS) Guide › Daily Processing (APSExpire) › Event Processing

Event Processing

APSExpire is only concerned with seven conditions (Events) that affect user records. The events and the action taken by APSExpire are described in this section.

In all cases, APSExpire will calculate a new value of smapsNextAction and save it back to the user record.

If no action is required for a user record, smapsNextAction will be set to 99999999999999Z CYCLE COMPLETE so that APSExpire will no longer process the record.

The following conditions (events) concern ASPExpire:

• The user is not initialized (smapsNextAction is not set).

  APSExpire will check to see if any other event should also occur. The user's date will be updated. This event is never logged to the log file.

• A user's password will expire within a number of days. This is useful, for example, when a typical user only logs in, say, every 90 days. Users may never see the on-line password change warnings.

  APSExpire will send email if a template is specified for this event. The mail can contain the date that the password will expire and the number of days remaining before expiration.

  This event will be logged with an event id of PASSWORD WARNING.

• A user's password has expired, but a grace period or grace logins remain.

  APSExpire will send email if a template is specified for this event. The mail can contain the date that the password expired and the number of days remaining before the user is disabled.

  This event will be logged with an event id of PASSWORD SOFT EXPIRE.

• A user's password has expired, no grace period or grace logins remain and the user record will be disabled.

  APSExpire will send email if a template is specified for this event. The mail can contain the date that the password expired.

  APSExpire will disable the user account.

  This event will be logged with an event id of PASSWORD HARD EXPIRE.

• A user's account has remained inactive for too long and will be disabled shortly.

  APSExpire will send email if a template is specified for this event. The mail can contain the date that the account will expire and the number of days remaining before expiration.

  This event will be logged with an event id of ACCOUNT WARNING.

• A user's account has remained inactive for too long and will be disabled now.

  APSExpire will send email if a template is specified for this event. The mail can contain the date that the account expired. Typically, this mail is sent internally.

  APSExpire will disable the user account.

  This event will be logged with an event id of ACCOUNT EXPIRE.

• A user's account is eligible for purging (deletion).

  This event will be logged with an event id of ACCOUNT PURGE. No other action will be taken.