MODULE	ACMEUITL
IDENT	"X05-001"

!**    Copyright 2001 Compaq Information Technologies Group, L.P.
!**
!**    Compaq and the Compaq logo are trademarks of Compaq Information
!**    Technologies Group, L.P. in the U.S. and/or other countries.
!**
!**    Confidential computer software. Valid license from Compaq required for
!**    possession, use or copying. Consistent with FAR 12.211 and 12.212,
!**    Commercial Computer Software, Computer Software Documentation, and
!**    Technical Data for Commercial Items are licensed to the U.S. Government
!**    under vendor's standard commercial license.

DEFINE TYPE acme_auth_flags_options
	!
	! Common flags
	!
	KEYWORD audit,		NEGATABLE
	KEYWORD timeout,	NEGATABLE
	KEYWORD	ucs,		NEGATABLE
	KEYWORD default_principal,
				NONNEGATABLE
	!
	! Function specific flags
	!
	KEYWORD acquire_credentials,
				NEGATABLE	! Equivalent to /PERSONA
	KEYWORD merge_persona,	NONNEGATABLE	! Equivalent to /PERSONA=MERGE
	KEYWORD copy_persona,	NONNEGATABLE	! Equivalent to /PERSONA=COPY
	KEYWORD override_mapping,
				NEGATABLE
	KEYWORD authorization,	NEGATABLE
	KEYWORD foreign_policy_hints,
				NEGATABLE

DEFINE TYPE acme_change_flags_options
	!
	! Common flags
	!
	KEYWORD audit,		NEGATABLE
	KEYWORD timeout,	NEGATABLE
	KEYWORD	ucs,		NEGATABLE
	KEYWORD default_principal,
				NONNEGATABLE

DEFINE TYPE acme_dialogue_options
	KEYWORD input,		NEGATABLE
	KEYWORD echo,		NEGATABLE

DEFINE TYPE acme_mechanism_options
	KEYWORD password,	NONNEGATABLE
	KEYWORD challenge_response,
				NONNEGATABLE

DEFINE TYPE acme_persona_options
	KEYWORD copy,		NONNEGATABLE	! Equivalent to /FLAGS=(ACQUIRE_CREDENTIALS,COPY_PERSONA)
	KEYWORD merge,		NONNEGATABLE	! Equivalent to /FLAGS=(ACQUIRE_CREDENTIALS,MERGE_PERSONA)

DEFINE TYPE acme_logon_type_options
	KEYWORD	network,	NONNEGATABLE
	KEYWORD batch,		NONNEGATABLE
	KEYWORD local		DEFAULT,
				NONNEGATABLE
	KEYWORD dialup,		NONNEGATABLE
	KEYWORD remote,		NONNEGATABLE

DEFINE TYPE acme_new_password_flags_options
	KEYWORD password1,	NONNEGATABLE
	KEYWORD password2,	NONNEGATABLE

DEFINE SYNTAX acme_authenticate
	IMAGE acme$tools:acmeutil
	!
	! Command parameters
	PARAMETER p1,
		LABEL = module,
		VALUE ( REQUIRED,
			TYPE = acme_modules )
	!
	! Command parameters
	!
	QUALIFIER flags
		VALUE ( LIST,
			TYPE = acme_auth_flags_options )
	QUALIFIER logon_type
		VALUE ( TYPE = acme_logon_type_options )
	QUALIFIER persona
		VALUE ( LIST,
			TYPE = acme_persona_options )
	QUALIFIER domain
		VALUE ( TYPE = $QUOTED_STRING )
	QUALIFIER principal
		VALUE ( TYPE = $QUOTED_STRING )
	QUALIFIER password
		VALUE ( LIST,
			TYPE = $QUOTED_STRING )
	QUALIFIER mechanism
		VALUE ( TYPE = acme_mechanism_options )
	QUALIFIER dialogue
		VALUE ( LIST,
			TYPE = acme_dialogue_options )
	QUALIFIER count
		VALUE ( DEFAULT = 1,
			TYPE = $number )
	QUALIFIER timeout_interval
		VALUE ( DEFAULT = 30,
			TYPE = $number )

	QUALIFIER trace
	QUALIFIER debug
	DISALLOW (persona AND NEG flags.acquire_credentials)
	DISALLOW (NEG persona AND flags.acquire_credentials)
	DISALLOW (flags.merge_persona AND
			NOT (flags.acquire_credentials OR persona))
	DISALLOW (flags.copy_persona AND
			NOT (flags.acquire_credentials OR persona))
	DISALLOW (flags.override_mapping AND
			NOT (flags.acquire_credentials OR persona))
	DISALLOW (NOT flags.timeout AND timeout_interval)
	DISALLOW (domain AND flags.default_principal)
	DISALLOW (principal AND flags.default_principal)



DEFINE SYNTAX acme_changepassword
	IMAGE acme$tools:acmeutil
	!
	! Command parameters
	PARAMETER p1,
		LABEL = module,
		VALUE ( REQUIRED,
			TYPE = acme_modules )
	!
	! Command parameters
	!
	QUALIFIER flags
		VALUE ( LIST,
			TYPE = acme_change_flags_options )
	QUALIFIER logon_type
		VALUE ( TYPE = acme_logon_type_options )
	QUALIFIER domain
		VALUE ( TYPE = $QUOTED_STRING )
	QUALIFIER principal
		VALUE ( TYPE = $QUOTED_STRING )
	QUALIFIER password
		VALUE ( LIST,
			TYPE = $QUOTED_STRING )
	QUALIFIER new_password
		VALUE ( LIST,
			TYPE = $QUOTED_STRING )
	QUALIFIER new_password_flags
		VALUE ( LIST,
			TYPE = acme_new_password_flags_options )
	QUALIFIER dialogue
		VALUE ( LIST,
			TYPE = acme_dialogue_options )
	QUALIFIER count
		VALUE ( DEFAULT = 1,
			TYPE = $number )

	QUALIFIER timeout_interval
		VALUE ( DEFAULT = 30,
			TYPE = $number )

	QUALIFIER trace
	QUALIFIER debug
	DISALLOW (new_password AND new_password_flags)
	DISALLOW (NOT new_password AND NOT new_password_flags)
	DISALLOW (domain AND flags.default_principal)
	DISALLOW (principal AND flags.default_principal)

DEFINE TYPE acme_modules
	KEYWORD authenticate,	SYNTAX = acme_authenticate
	KEYWORD changepassword,	SYNTAX = acme_changepassword

DEFINE VERB acmeutil
	!
	! Command parameters
	!
	PARAMETER p1,
		LABEL = module,
		PROMPT = "Module",
		VALUE ( REQUIRED,
			TYPE = acme_modules )