XUA/XPQ: Using Password Program to change passwords for RSA or Radius users

XUA/XPQ: Using Password Program to change passwords for RSA or Radius users

 If executing the HPE password program or an XPQ version of PASSWORD prior to the XPQ release 3.45, then a UAGROUP(s) must be added to the UAACL file (XUA) to process the authentication when the requestor is the PASSWORD program and the user is a user requiring multi-factor authentication (MFA), e.g. RSA or Radius.  

The UAGROUP(s) should be added near the top of the UAACL file and should be similar to the following:

Example:

UAGROUP XUA-RSA-PASSWORD-OFF 
   DESCRIPTION "Don't require RSA when invoking  PASSWORD program" 
   FROM_USER $EVERYONE 
   TO_USER $EVERYONE 
   REQUESTOR $SYSTEM.SYSNN.PASSWORD 
                        $<vol>.XYGATEPQ.PASSWORD   ! Only prior to XPQ release 3.45
   RSA_AUTHENTICATE OFF 
   RSA_REQUIRE_PASSWORD OFF 

UAGROUP XUA-RADIUS-PASSWORD-OFF 
   DESCRIPTION "Don't require Radius  when invoking  PASSWORD program" 
   FROM_USER $EVERYONE 
   TO_USER $EVERYONE 
   REQUESTOR $SYSTEM.SYSNN.PASSWORD 
                      $<vol>.XYGATEPQ.PASSWORD   ! Only prior to XPQ 3.45
   RADIUS_AUTHENTICATE OFF 
   RADIUS_REQUIRE_PASSWORD OFF 

(Where $<vol> is the disk volume where XPQ was installed.)



If this article did not provide a solution, please open a case with our support team by sending an email message to support@xypro.com.