Tools for special tasks Compression of the ACL Database
Product Manual U7613-J-Z815-6-76
© Siemens Nixdorf Informationssysteme AG 1995 Pfad: D:\O7613e6\u7613e.k07

7.3.7 Checking the password expiry with the asxpwexp utility

The asxpwexp utility can be used to check which Advanced Server for UNIX users’
passwords are due to expire within the next “n” (0-28) days. The user can be notifi ed of this
by electronic mail, and be given plenty of advance warning if the utility is invoked regularly
using cron, for example.
Syntax:
asxpwexp [0-28] (default: 5)
In order to be able to send a mail, the asxpwexp.usr configuration file must be available and
provide a mapping between Advanced Server for UNIX users and a mail addres s for these
users. If there is no specific information to be provided to the user, a standard notification
is sent. The program uses the UNIX mail command internally.
Syntax of the asxpwexp.usr file:
<AS/X user>:<Mail_address>[:user-specific]
You can use any address that can also be used by UNIX Mail as the mail address.
Examples:
fred:fred: Your password will expire in 10 days !
steve:steveJ@lion
john:lion!johnny:Your password will expire now!
7.4 Compression of the ACL Database
Advanced Server for UNIX stores permissions for files and director ies into it's ACL
database /var/opt/lanman/datafiles/acl*. Whereas UNIX permissions of files and directories
are part of the file system, AS/X permissions are stored in a central place.
If you rename (mv) or delete (rm, rmdir) these files or directories within UNIX t he AS/X ist
bypassed and the entries in the ACL database will not be adapted. This results in entries
pointing to non-existing files and directories.
With the AS/X tool acladm <option> you can remove superfluous entries. However the
database will not be reorganized such that gaps exist between the used entries . The total
diskspace occupied will not be reduced. Those gaps will be used by fu ture entries of course.
If you remove or delete files and directories from an AS/X client the ACL d atabase will be
changed accordingly. Entries will be renamed or removed. However also in this case no
reorganization of the ACL database takes place.