2.1 pdacunlck (Release consecutive certification failure account lock state)

Organization of this section
(1) Function
(2) Executor
(3) Format
(4) Command arguments
(5) Rules
(6) Notes

(1) Function

The pdacunlck command releases identifiers from consecutive certification failure account lock state authorization whose account lock period has not expired, or authorization identifiers that are in permanent consecutive certification failure account lock state.

When executed, the pdacunlck command sets to the null value the consecutive certification failure account lock date and time and the consecutive certification failure count for an authorization identifier if its consecutive certification failure account lock date and time in the SQL_USERS data dictionary table is not the null value.

(2) Executor

HiRDB administrator

(3) Format

pdacunlck {authorization-identifier[,authorization-identifier]...|ALL}
          [-W execution-monitoring-interval]

(4) Command arguments

(a) authorization-identifier[,authorization-identifier]...

Specifies the authorization identifiers whose consecutive certification failure account lock state is to be released. You can specify a maximum of 128 authorization identifiers.

(b) ALL

Specifies that all authorization identifiers are to be released from consecutive certification failure account lock state.

A user attempting to execute the pdacunlck command with ALL specified cannot connect to HiRDB if the user privilege information buffer does not contain information about the CONNECT permissions and the consecutive certification failure account lock date and time are not the null value.

(c) -W execution-monitoring-interval ~<unsigned integer> ((0 to 3600))

Specifies (in minutes) the monitoring interval when the execution time of the pdacunlck command is to be monitored. For guidelines on the value to specify and details about the resulting operation, see the description of the pd_cmd_exec_time operand in the system common definition in the manual HiRDB Version 9 System Definition.

If 0 is specified in this option, the command's execution time is not monitored.

If this option is omitted, the value of the pd_cmd_exec_time operand in the system common definition takes effect.

(5) Rules

  1. The pdacunlck command can be executed only when HiRDB is running.
  2. The pdacunlck command must be executed at the server machine that contains the single server or where the system manager is located.
  3. The pdacunlck command cannot be executed if the data dictionary RDAREA is shut down.

(6) Notes

  1. When an authorization identifier is specified, the command places that row of the SQL_USERS data dictionary table in the lock mode. When ALL is specified, the command locks the rows of the SQL_USERS data dictionary table for all users whose consecutive certification failure account lock date and time are not the null value.
  2. For the pdacunlck command, return code 0 indicates normal termination, and return code 8 indicates abnormal termination.
  3. If an authorization identifier is enclosed in double quotation marks ("), the command treats it as being case sensitive. If it is not enclosed in double quotation marks ("), the command treats it as all uppercase letters. If you are using sh (Bourne shell), csh (C shell), or ksh (Korn shell), you must enclose the entire set of authorization identifiers in apostrophes (').