SET CMDLIMIT

Read syntax diagramSkip visual syntax diagram Set CMDLIMit AUTOLogXAUTOLog4nnn

Authorization

Privilege Class: B

Purpose

Use SET CMDLIMIT to limit the number of incorrect passwords to be processed with the AUTOLOG and XAUTOLOG commands. When a user exceeds this limit, CP disables the commands for the rest of the user logon session.

Operands

AUTOLog nnn
XAUTOLog nnn
sets the system limit for incorrect passwords entered on the AUTOLOG or XAUTOLOG command. The maximum limit is 255, the minimum limit is 1, and the default limit is 4.

Usage Notes

  1. For security reasons, CP limits the number of incorrect passwords allowed on the AUTOLOG and XAUTOLOG commands in each user's logon session. The SET CMDLIMIT lets you raise or lower that limit.
  2. Use the QUERY CMDLIMIT command to determine the current system limit value.
  3. AUTOLOG is an accepted synonym for XAUTOLOG. The minimum truncation is AUTOL.
  4. The initial system setting depends on how the JOURNALING system configuration statement is specified at system generation. If the FACILITY ON operand is specified, and no value is specified for the number of logon attempts, the initial setting of the limit is 4.
  5. If a user exceeds the value specified by nnn and logon journaling is enabled, the user will not be able to enter the AUTOLOG or XAUTOLOG commands as long as logon journaling is enabled, even if the CMDLIMIT value nnn is increased with the SET CMDLIMIT command.

    If a user exceeds the value specified by nnn and logon journaling is not enabled, the user will not be able to enter the AUTOLOG or XAUTOLOG commands. However, if the value nnn is increased with the SET CMDLIMIT command, the user will be allowed additional attempts to use the AUTOLOG or XAUTOLOG commands.

    If a user exceeds the value specified by nnn and logon journaling is enabled (and is prevented from executing the AUTOLOG or XAUTOLOG commands) and then the SET JOURNAL LOGON OFF command is issued, the number of invalid password attempts accrued when logon journaling was enabled will not be reset. Consequently, if the nnn value of SET CMDLIMIT is not increased, the user will still not be able to run the AUTOLOG or XAUTOLOG commands. However, if the nnn value of SET CMDLIMIT is increased, the user will be allowed additional attempts to use the AUTOLOG or XAUTOLOG commands.

Messages

  • HCP003E Invalid option - {option|command contains extra option(s) starting with option}
  • HCP1014E A required option is missing.
  • HCP1826E The system limit of incorrect passwords was specified with an invalid number - number