Rules Facility Guide › VMXRPI Configuration File Reference › CPACTION Record

CPACTION Record

The CPACTION record defines the default action to be taken when the Rules Facility is not initialized.

To specify the default action for a specific user ID or all user IDs, use this form:

CPACTION userid {ACCEPT [NOPASS] | REJECT | WAIT}

To specify the default action for all members of a security group, use this form:

CPACTION groupid {ACCEPT [NOPASS] | REJECT | WAIT} GROUP

userid

Specifies the user ID whose default actions are being set. The userid can be either a specific user ID or an asterisk (*). If userid is an asterisk, the default action applies to all users who do not have specific actions set for them by another CPACTION record.

groupid

Specifies the name of an ACIGROUP whose default actions are being set. The action specified applies to all members of the ACIGROUP unless specific user IDs in the group are given other specific CP actions.

ACCEPT

Specifies that the default action is ACCEPT for all CP commands.

REJECT

Specifies that the default action is REJECT for all CP commands.

WAIT

Specifies that CP commands, except LOGON, are to wait for rules evaluation. You can still log on immediately. Disconnected users must wait for command execution, while connected users are asked to RETRY or CANCEL the command. Use the WAIT parameter to suspend CA VM:Batch jobs while CA VM:Secure is not available, and to resume without error when it becomes available again.

Note: Directory links do not have to wait for rules evaluation.

The WAITCHK record in the VMXRPI configuration file is used with the WAIT parameter on the CPACTION record.

Note: For complete information about the WAITCHK record, see WAITCHK Record.

[NOPASS]

Specifies that CP commands are to be accepted without password verification. The NOPASS parameter is valid only when used with the ACCEPT action parameter and a specific user ID. An * representing all user IDs is not allowed with the NOPASS operand.

Note: The NOPASS parameter does not apply to the CP LOGON command.

GROUP

Specifies that groupid is a security group name. The GROUP parameter is useful in that you can add or subtract user IDs from groups without having to bring the program down and back up again. For example, this record could be useful for defining new VM:Batch worker machines:

CPACTION BATWRKR WAIT GROUP

When a new worker is needed it can simply be added to the ACIGROUP, BATWRKR. In this way no CP SYSGEN is required to reconfigure the CP component for the new user.