AUTHSH(ADM)                        UNIX System V



     Name
          authsh - administrator interface for authorization subsystem


     Syntax
          /usr/lib/sysadm/authsh


     Description
          authsh is the screen interface invoked by the  sysadmsh(ADM)
          Accounts   selection   to   administer   the   authorization
          subsystem. It is a full screen menu  driven  interface  that
          provides  the  functions necessary to control the generation
          and maintenance of user and system passwords,  the  terminal
          database  configuration,  terminal  and account locking, and
          the generation of administrator reports on system activity.

          The functions supported by the main level menu are:

          User        This category of screen interfaces  is  provided
                      for  the  setup and maintenance of user accounts
                      and user account passwords. The screens are used
                      to   add,   update,  display,  and  delete  user
                      accounts from the system. Also, modifications to
                      user  account  passwords or modifications to the
                      various criteria controlling the  generation  of
                      account  passwords  is  accomplished  using this
                      menu option.

          System      These options are provided for  the  maintenance
                      of    system-wide    parameters   like   default
                      privileges,   password   expiration,    password
                      lifetime,   single  user  password  requirement,
                      restrictive password generation, and  the  delay
                      time  between  login  attempts. These parameters
                      apply on a global system  basis  rather  than  a
                      user account basis.

          Terminals   The terminal database interface screens are used
                      for  the  maintenance of the database entries to
                      support the addition, deletion,  and  update  of
                      terminal    information.    Additionally,   this
                      category  includes  the  necessary  screens  for
                      setting   and   clearing   locks   on   specific
                      terminals.

          Reports     This category provides the administrator with  a
                      method  of  generating various reports on system
                      activity.   Report   types   include    password
                      database,  terminal database, and login activity
                      reports.

          The interface program is located in  the  trusted  computing
          base directory /tcb/bin.

     See Also
          passwd(C), ``Maintaining System Security,'' chapter  of  the
          System Administrator's Guide


     Files
          /etc/group,
          /etc/passwd,
          /tcb/files/auth/[a-z]/*
          /tcb/files/biodb/[a-z]/*,
          /tcb/files/biodb/schema,


     Notes
          Invoking   authsh(ADM)   is   not   recommended;   use   the
          sysadmsh(ADM) Accounts selection.


     Value Added
          authsh is an extension of AT&T  System  V  provided  by  the
          Santa Cruz Operation.


     (printed 8/23/89)                                  AUTHSH(ADM)