1 SCANUAF
  SCANUAF is a utility program used to examine the system authorization
  file SYSUAF.DAT in a transpose manner.  The AUTHORIZE utility allows 
  you to display all SYSUAF parameters about a specified user; SCANUAF, 
  on the other hand, allows you to display all users who match a 
  specified set of SYSUAF parameter criteria.

  This help file provides a brief description of SCANUAF commands and
  operation.  More complete information is given in the user guide.

2 Commands
  General commands are parameter-value pairs of the form:

     SCANUAF> <parameter><comparison><value>

  where <parameter> is a UAF parameter (listed under Parameters);
        <comparison> is one of =, \, <, or >;
        <value> is a value to compare with the UAF values.

  The input line can be up to 255 characters long, specifying up to 64
  parameter-value pairs.  Each parameter-value pair must be separated by 
  a logical operator & (logical AND) or | (logical OR), which dictates the 
  logic SCANUAF is to use to search the authorization file (see HELP 
  Operation).  

  SCANUAF also supports multi-level parentheses nesting of parameter-value 
  pairs (see HELP Examples).  This allows you to define elaborate logic 
  for SCANUAF to use in searching the authorization file.

  Parameter-value pairs _cannot_ contain embedded blanks.  Blanks can
  be embedded elsewhere in the input line to improve readability.

2 Special_Commands
  Special input commands include the following:

     SCANUAF> SET NODE <nodename>      ! Restrict the search to the
                                       ! specified <nodename>.
                                       ! <nodename> can also be ALL, 
                                       ! CLUSTER, or DECNET.  A blank
                                       ! <nodename> results in ALL.
     SCANUAF> SET REPORT <reporttype>  ! Set the data display type.  
                                       ! <reporttype> can be BRIEF or 
                                       ! FULL (or blank, which results 
                                       ! in FULL).
     SCANUAF> SET OUTPUT <destination> ! Send output to the specified 
                                       ! <destination>.   A blank 
                                       ! <destination> results in 
                                       ! SYS$OUTPUT.
     SCANUAF> SHOW                     ! Print the current special input 
                                       ! command parameters and a list
                                       ! of the available nodes.
     SCANUAF> AUTHORIZE                ! Run the AUTHORIZE utility.
     SCANUAF> HELP                     ! Help. 
     SCANUAF> EXIT                     ! Terminate SCANUAF. 
  
2 Parameters
  The list of parameters for input parameter-values pairs is:

  AC*COUNT        Account name                          
  AS*TLM          AST queue limit                       
  BATCHP*RIME     Hourly batch access, primary          
  BATCHS*EC       Hourly batch access, secondary        
  BI*OLM          Buffered I/O limit                    
  BY*TLM          Buffered I/O byte count limit         
  CLI*            Default command language interpreter  
  CLIT*ABLES      User CLI tables                       
  CP*UTIME        CPU time quota                        
  DEF*PRIVILEGE   Default privledges                    
  DEV*ICE         Default device                        
  DIALUPP*RIME    Hourly dialup access, primary         
  DIALUPS*EC      Hourly dialup access, secondary       
  DIO*LM          Direct I/O limit                      
  DIR*ECTORY      Default directory                     
  ENCRYPT*        Encryption algorithm for primary pwd  
  ENCRYPT2*       Encryption algorithm for secondary pwd
  ENQ*LM          Enqueue limit                         
  EX*PIRATION     Expiration date for account           
  FI*LLM          Open file limit                       
  FL*AGS          Login flags                           
  G*ROUP          UIC group subfield                    
  J*TQUOTA        Job-wide log name table creation quota
  LG*ICMD         Login command file                    
  LOCALP*RIME     Hourly local access, primary          
  LOCALS*EC       Hourly local access, secondary        
  LOGF*AILS       Login failures                        
  LOGI*NT         Date of last interactive login        
  LOGN*ONINT      Date of last non-interactive login    
  MAXA*CCTJOBS    Maximum jobs for account allowed      
  MAXC*LASS       Maximum security class                
  MAXD*ETACH      Maximum detached processes for UIC    
  MAXJ*OBS        Maximum jobs allowed for UIC          
  ME*MBER         UIC member subfield                   
  MI*NCLASS       Minimum security class                
  NETWORKP*RIME   Hourly network access, primary        
  NETWORKS*EC     Hourly network access, secondary      
  O*WNER          Owner name                            
  PAR*ENTID       Identifier of account owner           
  PASSWORD*       Primary password                      
  PASSWORD2*      Secondary password                    
  PB*YTLM         Paged buffer I/O byte count limit     
  PG*FLQUOTA      Page file quota                       
  PRC*LM          Subprocess creation limit             
  PRIM*EDAYS      Primary days                          
  PRIO*RITY       Base process priority                 
  PRIV*ILEGE      Authorized privledges                 
  PROXYL*IM       Number of proxies user can grant      
  PROXYU*SE       Number of proxies granted             
  PWDDATE*        Date of primary password change       
  PWDDATE2*       Date of secondary password change     
  PWDL*IFETIME    Password lifetime                     
  PWDM*INIMUM     Minimum password length               
  Q*UEPRI         Maximum job queuing priority          
  REMOTEP*RIME    Hourly remote access, primary         
  REMOTES*EC      Hourly remote access, secondary       
  RT*YPE          UAF record type                       
  SA*LT           Random password salt                  
  SH*RFILLM       Shared file limit                     
  SUBACCL*IM      Number of sub-accounts allowed        
  SUBACCU*SE      Number of sub-accounts in use         
  SUBI*D          User sub-identifier                   
  T*QELM          Timer queue entry limit               
  USE*RNAME       Username of account                   
  USR*DATOFF      Offset of counted string of user data 
  V*ERSION        UAF format version                    
  WSD*EFAULT      Default working set size              
  WSE*XTENT       Working set extent                    
  WSQ*UOTA        Working set quota                     
 
2 Operation
  Input to SCANUAF consists of sets of parameter-value pairs,
  separated by logical operators, optionally nested with parentheses.

  When an input line is entered, then for each username in the 
  authorization file, SCANUAF first logically evaluates each 
  parameter-value pair by comparing the condition specified by the 
  parameter-value pair with the data from the authorization file.
  SCANUAF then uses the logical result of each parameter-value pair to
  logically evaluates the entire input line according to the operators 
  and parentheses nesting specified on the input line.  If this
  composite logical value is TRUE for a given username record, then
  that username is output by SCANUAF, optionally including the data 
  that resulted in the input line evaluating TRUE.

  Sounds confusing, but it really isn't.  Check the examples.
  
2 Examples
  These examples should show you how SCANUAF works.  Note that they
  don't necessarily suggest any data that you would want to see from 
  your authorization files.

  To display all users with a base priority of 4, enter the command

     SCANUAF> PRIORITY=4

  To display all users not in UIC group 20 that have SYSPRV authorized
  privilege and have not logged in interactively since the beginning
  of 1987, enter the command:

     SCANUAF> GROUP\20 & PRIV=SYSPRV & LOGINT<01-JAN-1987

  The following command will display all users who have a BIOLM between 
  10 and 20 or a DIOLM between 10 and 20:

     SCANUAF> (BIOLM>9 & BIOLM<21) | (DIOLM>9 & DIOLM<21)

  The following command will display all users who are in a UIC group
  of 10 or less, or who are in UIC groups 20 or 30 and have a base
  priority greater than 4:

     SCANUAF> GROUP<11 | ((GROUP=20|GROUP=30)&PRIORITY>4)
