Guardian Nonstop Logon down from super.super or userid.mgr without password

[Kee_aus]

Where do I set in safeguard or TACL or XYGATE that allows one to logon down to another user without a password? Example from super.super to another user without a password. Got a new NonStop, doesn't seem to work.

[Suman_1978]

Hi,

I am not an expert on this nor I have used this script myself.
Do check this document, page# 65

Something like this.  (I could be wrong as well)

UAGROUP SUPER-LOGON-NO-PASSWORD
!Selection Criteria:
FROM_USER 255,255
TO_USER $EVERYONE NOT 253,1
PASSWORD_REQUIRED OFF

Thank You!
I work with HPE but opinions expressed here are mine.

[Kee_aus]

Unforunately we don't have XYGATEUA. I believe this is something we can do from safeguard without using xypro products. But I can't any documentation on this.

[Suman_1978 · Accepted solution]

Hi,

Found some information here in Safeguard Audit Service Configuration Guide.
If the group manager or the super ID attempts to log on as another user and PASSWORD-REQUIRED is OFF, the logon succeeds without a password. Auditing is performed if specified.

Refer to Security Management Guide.  Log on as any user whose administrative group is group number 8 without knowing that user’s password (unless the Safeguard PASSWORD-REQUIRED option is set)

Safeguard User's Guide (hpe.com)
Safeguard Audit Service Configuration Guide (hpe.com)
Safeguard Administrator’s Manual (hpe.com)
Safeguard Reference Manual (hpe.com)

Thank You!
I work with HPE but opinions expressed here are mine.