Information level 2 accommodates additional information for the UAS database. It is an extension of user_info_1.

struct user_info_2 {
   unsigned char                   usri2_name[UNLEN+1];
   unsigned char                   usri2_pad_1;
   unsigned char                   usri2_password[ENCRYPTED_PWLEN];
   long                            usri2_password_age;
   unsigned short                  usri2_priv;
   unsigned char LSFAR * LSPTR     usri2_home_dir;
   unsigned char LSFAR * LSPTR     usri2_comment;
   unsigned short                  usri2_flags;
   unsigned char LSFAR * LSPTR     usri2_script_path;
   unsigned long                   usri2_auth_flags;
   unsigned char LSFAR * LSPTR     usri2_full_name;
   unsigned char LSFAR * LSPTR     usri2_usr_comment;
   unsigned char LSFAR * LSPTR     usri2_parms;
   unsigned char LSFAR * LSPTR     usri2_workstations;
   long                            usri2_last_logon;
   long                            usri2_last_logoff;
   long                            usri2_acct_expires;
   unsigned long                   usri2_max_storage;
   unsigned short                  usri2_units_per_week;
   unsigned char LSFAR * LSPTR     usri2_logon_hours;
   unsigned short                  usri2_bad_pw_count;
   unsigned short                  usri2_num_logons;
   unsigned char LSFAR * LSPTR     usri2_logon_server;
   unsigned short                  usri2_country_code;
   unsigned short                  usri2_code_page;
};

where:

• The first nine fields in this data structure are identical to those in the previous level.

• usri2_auth_flags grants operator privileges (accounts, print, comm, server) to users. The ACCESS.H header file defines the following possible values: ÚÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ¿
  ³ SYMBOLIC CONSTANT ³ BITS ³ MEANING ³
  ÃÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ´
  ³ AF_OP_PRINT ³ 0 ³ If 1, print operator privilege is enabled. ³
  ÃÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ´
  ³ AF_OP_COMM ³ 1 ³ If 1, comm operator privilege is enabled. ³
  ÃÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ´
  ³ AF_OP_SERVER ³ 2 ³ If 1, server operator privilege is enabled. ³
  ÃÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ´
  ³ AF_OP_ACCOUNTS ³ 3 ³ If 1, accounts operator privilege is ³
  ³ ³ ³ enabled. (not supported in DSS) ³
  ÃÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ´
  ³ n/a ³ 4-31 ³ Reserved; must be 0. ³
  ÀÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÙ
  

• usri2_full_name points to an ASCIIZ string containing the full name of the user. The string can be NULL or can have as many as MAXCOMMENTSZ + 1 bytes.

• usri2_usr_comment points to an ASCIIZ string that is a user-settable field. The string can be NULL or it can have as many as MAXCOMMENTSZ + 1 bytes.

• usri2_parms points to an ASCIIZ string that is set aside for use by applications. The string can be NULL or it can have as many as MAXCOMMENTSZ + 1 bytes.

• usri2_workstations points to an ASCIIZ string containing a list of requesters from which a user is permitted to log on. A null string means all requesters are allowed. (To disallow logon, the account disabled flag must be set.) Up to 8 requesters can be specified, where the names are separated by spaces (0x20). The list of requesters can include IBM NetBIOS permanent names, which are listed as machine IDs, consisting of 12 hexadecimal characters. IBM NetBIOS permanent names are entered in the requester as follows:

  16DF.02AC.7DE9
  

• usri2_last_logon is the time and date (seconds since 1 January 1970) when the last logon occurred. A value of 0 means unknown. This field can be set only by the system; it is ignored in NetUserAdd and NetUserSetInfo calls. DSS always returns 0.

• usri2_last_logoff is the time and date (seconds since 1 January 1970) when the last logoff occurred. A value of 0 means unknown. This field can be set only by the system; it is ignored in NetUserAdd and NetUserSetInfo calls. DSS always returns 0.

• usri2_acct_expires is the time and date (seconds since 1 January 1970) when the account will expire. An expired account is the equivalent of a disabled account. An entry of 0xFFFFFFFF or (-1) means there is no expiration date.

• usri2_max_storage is the maximum storage allotted for the home directory. The units are kilobytes (KB). An entry of 0xFFFFFFFF or (-1) means unlimited storage. The field is not enforced by the system but is available to utilities such as CHKSTOR. Those utilities generate reports and send alerts when they determine that users have exceeded their maximum storage.

• usri2_units_per_week is the number of equal-length time units into which the week is divided. This value is used to compute the length of the bit string in logon_hours. It must be UNITS_PER_WEEK (168). This field is ignored by NetUserAdd and NetUserSetInfo calls.

• usri2_logon_hours points to a 21-byte (168 bits) map, in which each bit represents a unique hour in a week. The first bit (bit 0, word 0) is Sunday, 0:00 to 0:59. Bit 1, word 0 is Sunday, 1:00 to 1:59, and so on. If a bit is set in this bitmap, logon is allowed. If a bit is cleared, logon is not allowed.

  Note: A null pointer in this field for a NetUserAdd call permits access at all times. A null pointer in this field for a NetUserSetInfo call means that no change is made.

  
  usri2_bad_pw_count is the number of attempts to validate a bad password. A value of -1 means unknown. This field can be set only by the system and is ignored in NetUserAdd and NetUserSetInfo calls. DSS always returns -1.
  
  usri2_num_logons is the number of instances of logons to the account. A value of -1 means unknown. DSS always returns -1. This field can be set only by the system and is ignored by NetUserAdd and NetUserSetInfo.
  
  usri2_logon_server points to an ASCIIZ string that contains the name of the preferred server that validates user logon requests for this user. The server name should be preceded by a double backslash (\\) and should be the name of a domain controller or backup server on the domain. A server name of an asterisk (\\) indicates that the logon request can be handled by any domain controller or backup on the domain. A null string indicates that the domain controller is the logon server.
  
  usri2_country_code specifies the OS/2 country code for the user's language choice. This is used by the LAN Server software to generate messages in the appropriate language whenever possible.
  
  usri2_code_page is the OS/2 code page for the language choice of the user.

  ---

  [Back] [Next]