Without the CA VM:Secure interface, the CA VM:Tape CATALOG command can be issued by users only for tapes that they own. With the CA VM:Secure interface, users granted access by a VMTAPE CATALOG rule can catalog tapes owned by other users.
Tapes with passwords can be cataloged by other users if there is a rule allowing the CATALOG request and the requesting user ID specifies the password. If the rule allowing the request specifies the NOPASS option, the check for the catalog password is bypassed. Requesting user IDs must only give their logon passwords when cataloging a tape controlled by a rule with the LOGPASS option.
All CA VM:Tape CATALOG requests default to normal processing if no rules are defined to govern CATALOG requests. The NORULE record in the SECURITY CONFIG file does not apply to CATALOG requests.
Examples
ACCEPT BACH VMTAPE CATALOG *
BACH wanted to change the retention period on tape BUN001 owned by POTTER, so she issued the following CA VM:Tape command:
vmtape catalog bun001 retpd 02
The software responds as follows:
VOLUME ‘BUN001’ EXPIRATION DATE IS NOW 2010/007
ACCEPT ASTA VMTAPE CATALOG OBER01 (LOGPASS
ASTA issued the CATALOG command to change the expiration date for OBERON’s tape, OBER01, by entering:
vmtape catalog ober01 expdt 2010/032
The software asks for ASTA’s logon password:
ENTER YOUR LOGON PASSWORD:
ASTA enters the password, and the software responds as follows:
VOLUME ‘OBER01’ EXPIRATION DATE IS NOW 2010/032
Without the LOGPASS option on the rule, ASTA would not have been prompted for her logon password when she issued the CATALOG command for OBERON tape OBER01. If tape volser OBER01 had been protected by a password and the rule did not have the LOGPASS option, ASTA would have been required to give the tape password.
ACCEPT CINDY VMTAPE CATALOG D00001
However, DAGMAR has protected her tape with a CA VM:Tape password for mount and catalog access. When CINDY issues the CATALOG command for tape D00001, she must also give the password RICCI for that tape by entering:
vmtape catalog d00001 expdt 2010/033 (password ricci
CA VM:Tape responds as follows:
VOLUME ‘D00001’ EXPIRATION DATE IS NOW 2010/033
DAGMAR changed the previous rule to include the NOPASS option so CINDY would not be prompted for the password when she issued the VMTAPE CATALOG command for DAGMAR’s tape. The rule is shown below:
ACCEPT CINDY VMTAPE CATALOG D00001 (NOPASS
Now CINDY can change the CA VM:Tape catalog entries for tape D00001 without specifying the password, by entering:
vmtape catalog d00001 dsn louey
The software responds as follows:
VOLUME ‘D00001’ FILE 1 DSN=‘LOUEY’
|
Copyright © 2014 CA.
All rights reserved.
|
|