How to enable OS level authentication from command line?

Question

Question

Raghuram Devarakonda · Apr 24, 2017

Hi,

I am able to enable OS level authentication for an instance from the UI (System Administration => Security => System Security => Authentication/CSP Session Options) but is there a way this can be done from command line as well?

Thanks,

Raghu

Discussion (7)1

Log in or sign up to continue

John Murray · Apr 24, 2017

The AutheEnabled property is an integer value that is treated as a set of bitflags. Here's one way of decomposing it:

%SYS>set sc=##class(Security.System).Get(,.props) %SYS>for bit=0:1:31 if $zboolean(props("AutheEnabled"),2**bit,1) write !,"Bit ",bit," is set" Bit 4 is set Bit 5 is set Bit 6 is set Bit 10 is set %SYS>

Documentation for the $ZBOOLEAN function is here. You can use the OR operation (third argument = 7) to set a specific bit within the existing value. For example, to ensure bit 4 (whose meaning is AutheOS) is set:

set props("AutheEnabled")=$zboolean(props("AutheEnabled"),2**4,7)

If you are satisfied with my answer please click on the checkmark alongside its title.

1 0

Pete Greskoff · Apr 24, 2017

You can also do this via ^SECURITY

%SYS>d ^SECURITY

1) User setup
2) Role setup
3) Service setup
4) Resource setup
5) Application setup
6) Auditing setup
7) Domain setup
8) SSL configuration setup
9) Mobile phone service provider setup
10) OpenAM Identity Services setup
11) Encryption key setup
12) System parameter setup
13) X509 User setup
14) Exit

Option? 12

1) Edit system options
2) Edit authentication options

1 0

score 0 · Answer 1 · 2017-04-24T11:33:37-04:00

It looks like the AutheEnabled property of Security.System is the equivalent. See class doc here.

Use the Get and Modify classmethods to fetch and update values.

score 0 · Answer 2 · 2017-04-24T14:59:09-04:00

Thanks for the pointer. I couldn't figure out exact code to set "AuthEnabled" property so instead, I used "Import" function to modify it. I found the exact value for "OS Authentication" by exporting from another instance where I enabled it from UI.

Thanks,

Raghu

score 0 · Answer 3 · 2017-04-24T17:18:30-04:00

Raghuram Devarakonda · Apr 24, 2017

Thanks. Will give it a try.

0 0

score 0 · Answer 4 · 2018-10-17T17:39:33-04:00

Thanks John, this was invaluable. Works for Security.Services class to modify %Services_* too, in case anyone else stumbles across this in the future!

Cheers

score 0 · Answer 5 · 2022-05-12T14:01:09-04:00

Enzo Medina · May 12, 2022

Is it possible to set this using iris merge functionality?

0 0