Command Reference › CAN Command (CA VM:Secure only) › Definitions

Previous Topic: CAN Command (CA VM:Secure only)

Next Topic: CA VM:Schedule-Related Parameters

Definitions

userid1

The user ID whose authorization is being checked.

AUTOLOG userid2

Queries whether userid1 can issue the CP AUTOLOG command for userid2.

COUPLE {lanowner lanname | SYSTEM vswitchname}

Queries whether userid1 can issue the CP COUPLE command for the lanname owned by landowner, or the virtual switch named vswitchname.

DIAL termaddr [ dialaddr ]

Queries whether the device at the specified terminal address can DIAL to userid1. For more information about terminal addresses, see Terminal Addresses.

Possible values for the termaddr command parameter are:

termaddr

Meaning

realterm

Address of a real terminal device, represented by four hexadecimal digits. (Example: 0024)

LDEV ldevid

Address of a logical device, represented by four hexadecimal digits. (Example: LDEV 0123)

IPADDR ipaddress

IPv4 address of a TN3270 connected terminal, represented by the standard dotted IP address form. An IPv4 address is four decimal numbers separated by periods. Each decimal number must be in the range 0 through 255. Leading zeros are not permitted (for example, use 1, not 001). (Example: IPADDR 10.0.89.51)

IPv6 address of a TN3270 connected terminal represented by 8 groups of 4 hexadecimal digits. The standard shorthand representations of an IPv6 address are also accepted.

NETID netid

Name of an SNA or VTAM logical unit, represented by up to eight characters.

(Example: NETID WEST0016)

You can optionally specify the DIAL command dial address for userid1 as dialaddr, a four‑digit hexadecimal address.

GROUP groupid

Queries whether userid1 can become a member of groupid using the CA VM:Secure GROUP command.

LINK userid2 vaddr [ linkmode ]

Queries whether userid1 can issue the CP LINK command to link to the minidisk of userid2, vaddr. You can also specify a linkmode for this link.

LOGON termaddr

Queries whether userid1 can log on from the device at the specified terminal address. For possible values for termaddr, see the DIAL parameter for this command.

LOGONBY userid2

Queries whether userid1 can log on to the target userid2 using either the CA VM:Secure LOGONBY Facility or the CP LOGON BY command.

SPOOL userid2

Queries whether userid1 can issue the CP SPOOL command to direct spool files to userid2.

STORE [ termaddr ]

Queries whether userid1 can issue the CP STORE HOST command. You can further restrict the query by specifying a terminal address from which the command may be entered. For possible values for termaddr, see the DIAL parameter for this command.

TAG [ node ]

Queries whether userid1 can issue the CP TAG command for any node. You can limit the search to a particular node.

TRANSFER userid2

Queries whether userid1 can issue the CP TRANSFER command to transfer spool files to or from userid2.

VALIDATE userid2

Queries whether userid1 can issue DIAGNOSE X ‘A0’ subcode X’’04’ to validate a logon password for userid2. This form is only valid for traditional passwords.

DIAG88

Queries whether userid1 can issue DIAGNOSE X’88’ subcode X’08’ to validate a logon password for userid2. This form must be used if password phrase support is in effect.

PASSCHNG

Queries whether userid1 can change a password phrase for userid2

DIAGD4

Queries whether userid1 can issue DIAGNOSE X’D4’ to set alternate (surrogate) user IDs.

XAUTOLOG userid2

Queries whether userid1 can issue the CP XAUTOLOG command for userid2.

[ GROUP groupname ]

Specifies a different security group for userid1; the command queries rules as if userid1 were in groupname. You can use this option with all parameters except DIAL and LOGON.