Novell Documentation: Novell SecureLogin 2.5

Using Variables

Substituting Variables

For the purposes of the script language, a variable is any identifier preceded by one of the characters %, $ or !. This identifier is called the variable prefix (for example, %CN, $username and !default). At run time, these identifiers are substituted for their values, which the script parser works out on each run.

The variable prefix determines the type of the value and the steps that should be taken to determine it. The three variable types are Directory Attribute (%), Symbol Table ($), and Vasco Pass Ticket (!).

SecureLogin supports a list of internal variables that the script language may used to

Determine what operations can be performed

Extract machine system information or network information about the local user

Variable Name	Description
?SYSVERSION	The local SecureLogin windows agent version. This variable can be used to determine if specific support is built into the product running on the user's workstation. The format of the variable is major.minor.build (for example, 2030008, which represents v2.30.008)
?SYSUSER(system)	This variable is the name of the user that was last used in the GINA or Windows* 95/98 login panel. This variable will only be available when the SecureLogin login extension is installed.
?SYSPASSWORD(system)	This variable is the password that matches the username presented in the GINA panel. This value can only be retrieved if the SecureLogin login extension is installed in the GINA or Windows 95/98 login panel.
?SYSCONTEXT(system)	This variable lists the NDS eDirectory^TM user context as entered in the GINA or Windows 95/98 login panel. This variable requires the login extension to be installed.
?SYSTREE(system)	This variable is the NDS eDirectory tree name that was entered by the user. This variable requires the login extension to be installed.
?SYSSERVER(system)	This variable is the name of the server that was entered in the Login GINA or Windows 95/98 login panel. This variable requires the login extension to be installed.
?BROWSERTYPE(system)	This variable contains either Internet Explorer or Netscape* and indicates which browser the script is running.

Using eDirectory Attributes

This type of variable is prefixed by the % character. It instructs the parser to read a value from the current User's object in NDS eDirectory.

The attribute read must be a string, either case sensitive or not case sensitive. The attribute is read each time that the script is run.

Using Variables

A variable prefixed with the $ character is looked up in the current application entry.

If the value that was substituted also has a $ as its first character, that value is also run through the substitution engine. However, this process only occurs once.

If the symbol is not found in the current application, the user is prompted with a dialog box to enter the variable's value.

If the user enters a value, it is substituted immediately and the value is saved.

Using the Passticket Attribute

The ! character specifies that a one-time password should be generated.

To generate a passticket, a DES key and offset are required. At run time, the parser looks for the variables DESKEY and DESOFFSET in the platform specified as the rest of the variable identifier.

For example, the variable !Passticket looks for the variables DESKEY and DESOFFSET in the Passticket platform. The special identifier !default reads these variables from the current platform.

If either DESKEY or DESOFFSET is not found, random values are generated and saved in the designated platform.

Each platform script has an associated symbol table. A symbol table is referenced by its platform name and contains a list of variables and values that can be used in the script.