Sets the Access Control List and password for a username.
Format
SET USERNAME username
Parameters
Username
The Username being updated. If you specify the /DEFAULT qualifier, do
not specify a username.
Description
The SET USERNAME command is used to define Access Control
Lists and passwords for Usernames. The ACLs are used to control who may
specify the username as the username under which jobs should execute.
A user with the CMKRNL or BYPASS privilege can specify any valid
username.
If specified, the password is used when running a job on a foreign
system (such as Windows NT).
Note
When running jobs on Windows NT, the Windows NT accounts must have the
"Log on as a batch job" user right. You can grant this right
to individual accounts or to a Group which is then assigned to NT
accounts.
Qualifiers
/ACL=acl-spec
The /ACL qualifier is used to specify the Access Control List for the
specified username. This does not grant the specified username
any rights, it controls who may specify this username in a System, Job
or Setup definition as the username which the Job should run under.
/DEFAULT
The /DEFAULT qualifier is used to define an ACL which is applied for
any username which is not specifically listed.
/PASSWORD=password
Specifies a password which is used to execute jobs on a foreign system.
This password is not used on the local OpenVMS system.
Passwords are encrypted when they are stored and when they are sent to
a JAMS Agent. The rexec protocol requires unencrypted
passwords.
EXAMPLES
JAMS> SET USERNAME PAYBATCH/ACL=(IDENTIFIER=PAY_MGR,ACCESS=SUBMIT)
In this example, an ACL is defined for the username PAYBATCH. Any
OpenVMS user who has the PAY_MGR rights identifier is allowed to
specify the username PAYBATCH as the username under which a job should
run.
JAMS> SET USERNAME NTBACKUP/ACL=(IDENTIFIER=BACKUP,ACCESS=SUBMIT) -
_JAMS>/PASSWORD=CLEARTEXTPASSWORD
In this example, an ACL is defined for the username NTBACKUP. Any
OpenVMS user who has the BACKUP rights identifier is allowed to specify
the username NTBACKUP as the username under which a job should run. If
this username is used on a job which runs on a foreign system, the
password CLEARTEXTPASSWORD is sent to the foreign system.
JAMS> SET USERNAME/DEFAULT/ACL=(IDENTIFIER=[1,*],ACCESS=SUBMIT)
In this example, the default username ACL is defined. When
JAMS checks to see if a user is allowed to use a given
username, if the given username is not specifically listed, the default
username ACL is used. In this example, only people in the [1,*] UIC
group are allowed to specify usernames which do not have a specific ACL.
