z/VM: CP Commands and Utilities Reference - z/VM - IBM

SET CMDLIMIT
►►
Set
Authorization
Purpose
CMDLIMit
Operands
Usage Notes
AUTOLog
XAUTOLog
4
nnn
Privilege Class: B
SET CMDLIMIT
Use SET CMDLIMIT to limit the number of incorrect passwords to be processed
with the AUTOLOG and XAUTOLOG commands. When a user exceeds this limit,
CP disables the commands for the rest of the user logon session.
AUTOLog 4
XAUTOLog nnn
sets the system limit for incorrect passwords entered on the AUTOLOG and
XAUTOLOG commands. The maximum limit is 255; the minimum limit is one.
The limit is set to four if nnn is omitted.
1. For security reasons, CP limits the number of incorrect passwords allowed on
the AUTOLOG and XAUTOLOG commands in each user’s logon session. The
SET CMDLIMIT lets you raise or lower that limit.
2. Use the QUERY CMDLIMIT command to determine the current system limit
value.
3. AUTOLOG is an accepted synonym for XAUTOLOG. The minimum truncation is
AUTOL.
4. The initial system setting depends on how the SYSJRL macro is coded at
system generation. If the macro is coded with JOURNAL=NO, or if SYSJRL is
not coded, or if JOURNALing FACility ON is specified in the system
configuration file, the initial setting of the limit is four. However, if the SYSJRL
macro is coded with JOURNAL=YES, the setting of the limit is the value
supplied to the LOGLMT operand of the macro.
5. If a user exceeds the value specified by nnn and logon journaling is enabled,
the user will not be able to enter the AUTOLOG or XAUTOLOG commands as
long as logon journaling is enabled, even if the CMDLIMIT value nnn is
increased with the SET CMDLIMIT command.
If a user exceeds the value specified by nnn and logon journaling is not
enabled, the user will not be able to enter the AUTOLOG or XAUTOLOG
commands. However, if the value nnn is increased with the SET CMDLIMIT
command, the user will be allowed additional attempts to use the AUTOLOG or
XAUTOLOG commands.
If a user exceeds the value specified by nnn and logon journaling is enabled
(and is prevented from executing the AUTOLOG or XAUTOLOG commands)
and then the SET JOURNAL LOGON OFF command is issued, the number of
invalid password attempts accrued when logon journaling was enabled will not
be reset. Consequently, if the nnn value of SET CMDLIMIT is not increased, the
►◄
Chapter 2. CP Commands 1205