Neoview User Management and Security Administration Guide (R2.5)

For additional information about using the HPDM Policies dialog to view policy settings, see
the HPDM Online Help.
For the syntax of the INFO POLICY command, see “INFO POLICY Command” (page 50)
Changing Power Role Management Policy Settings
The Security Manager can use the Password tab of the HPDM Policies dialog to modify any of
the current power role management policy settings. He or she can also use the NCI ALTER
POLICY command as described in this manual, but HPDM presents a clearer and more convenient
interface for this task.
Changes in policy take effect within five minutes.
For additional information about using the HPDM Policies dialog to change policy settings, see
the HPDM Online Help.
For the syntax of the ALTER POLICY command, see “ALTER POLICY Command” (page 51).
INFO POLICY Command
This command lets you view all current security policy settings or the setting of a specified
security policy. Only a user who has the ROLE.SECMGR role may enter this command.
Syntax
[.SEC] INFO POLICY [DEFAULT|CURRENT|{attribute}]
Parameters
This command has the following parameters:
• DEFAULT means to display, not the current policy values, but the default values.
• CURRENT means to display the current policy values.
• attribute is a single attribute whose value you wish to display. For attribute keywords,
semantics, initial values, value ranges, and correlation between the keywords you use on
input and the labels you see on output, see “Neoview Password Encryption Policies”
(page 41), “Password Quality and Control Policies” (page 44), “User Management and
Authentication Logging Policies” (page 47), and “Power Role Management Policies”
(page 49).
The command fails and an error is returned if
• You are not logged on in the ROLE.SECMGR role.
• You are not in .sec mode.
Examples
The following example displays the current values of all security policy attributes.
.sec info policy current
Logging Options:
LogUserMgmt: false
IsUserMgmtLoggingRequired: false
LogPwdChange: false
IsPwdChangeLoggingRequired: false
LogPFLogonFailure: false
LogDBLogonFailure: false
LogPFLogonSuccess: false
LogDBLogonSuccess: false
IsDBLogonLoggingRequired: false
LogFileAgingInDays: 457
Role Password Options:
RolePwdForPlatform: N
50 Post-installation Security Setup Tasks