RE: Authority bit

I had a customer at v4r2 or 3.  I sent a note to an IBM contact at the lab.
He asked for a certain kind of data collection to determine the CPU cost -
the cost was predicted by the Performance Advisor.  I collected the data and
sent it to him.

Richard Jackson
mailto:richardjackson@richardjackson.net
http://www.richardjacksonltd.com
Voice: 1 (303) 808-8058
Fax:   1 (303) 663-4325

-|-----Original Message-----
-|From: owner-mi400@midrange.com [mailto:owner-mi400@midrange.com]On
-|Behalf Of Mark Knoppel/Reno/IBM
-|Sent: Monday, October 23, 2000 2:49 PM
-|To: MI400@midrange.com
-|Subject: Re: Authority bit
-|
-|
-|
-|Shahar,  what version/release are you running? In V4R2 (and perhaps V4R3)
-|there was something going on with the way the Performance Tools counted
-|authority lookups that generated very high authority lookup values and
-|indicated CPU usage. The high numbers were not related to private
-|authority
-|in this case.  A lookup is counted only when the system has to search the
-|user profile for the authority to an object. The *problem* went away with
-|V4R4.
-|
-|Regards,
-|
-|Mark Knoppel
-|IT Security Consultant, IBM Security & Privacy Services
-|Phone/Fax: 775-832-7554 T/L 280-9974 or Mobile: 775-846-0023 T/L 280-9985
-|Internet mail: knoppel@us.ibm.com or Internet msg:
-|7758460023@mobile.att.net
-|
-|Check Us Out!!
-|
-|http://www-3.ibm.com/security/services
-|
-|
-|"Carsten Flensburg" <flensburg@novasol.dk>@midrange.com on 10/23/2000
-|01:04:15 AM
-|
-|Please respond to MI400@midrange.com
-|
-|Sent by:  owner-mi400@midrange.com
-|
-|
-|To:   <MI400@midrange.com>
-|cc:
-|Subject:  Re: Authority bit
-|
-|
-|
-|Hi Shahar,
-|
-|You're right - there is a bit in the object header indicating whether
-|private authorities to the object exist or not. If not the search
-|algorithm
-|jumps to examine *PUBLIC authority.
-|
-|A second bit indicates whether any existing private authorities are less
-|than the public authorities. If not the system performs the same bypass of
-|additional authority lookups as the first bit and immediately examine
-|*PUBLIC authority.
-|
-|(Implementing AS/400 Security by Wayne Madden and Carol Woodbury)
-|
-|Best regards,
-|Carsten Flensburg
-|----- Original Message -----
-|From: <owner-mi400@midrange.com>
-|To: <mi400@midrange.com>
-|Sent: Sunday, October 22, 2000 9:49 PM
-|Subject: Authority bit
-|
-|
-|>
-|>
-|> Hi all,
-|>
-|> Our system suffers from high utilization resulting
-|> from authority lookup. We tried to reduce private
-|> authorities with no help.
-|>
-|> I faintly remember that there used to be a special
-|> authority bit indicating something like 'private
-|> authority existence'. This bit was used to enhance the
-|> authority algoritm of the system.
-|>
-|> Question:
-|>
-|> * is there something like private authority bit or is
-|> it just my imagination ?
-|>
-|> * If there is how can i reset it (since revoking
-|> private authorities seemed to be of no good.
-|>
-|>
-|> Thanks in advance for any input on this subject,
-|>
-|> Regards
-|>
-|>
-|> =====
-|> Shahar mor
-|> consultant
-|>
-|> __________________________________________________
-|> Do You Yahoo!?
-|> Yahoo! Messenger - Talk while you surf!  It's FREE.
-|> http://im.yahoo.com/
-|> +---
-|> | This is the MI Programmers Mailing List!
-|> | To submit a new message, send your mail to MI400@midrange.com.
-|> | To subscribe to this list send email to MI400-SUB@midrange.com.
-|> | To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
-|> | Questions should be directed to the list owner/operator:
-|dr2@cssas400.com
-|> +---
-|>
-|
-|+---
-|| This is the MI Programmers Mailing List!
-|| To submit a new message, send your mail to MI400@midrange.com.
-|| To subscribe to this list send email to MI400-SUB@midrange.com.
-|| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
-|| Questions should be directed to the list owner/operator:
-|dr2@cssas400.com
-|+---
-|
-|
-|
-|+---
-|| This is the MI Programmers Mailing List!
-|| To submit a new message, send your mail to MI400@midrange.com.
-|| To subscribe to this list send email to MI400-SUB@midrange.com.
-|| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
-|| Questions should be directed to the list owner/operator:
-|dr2@cssas400.com
-|+---

+---
| This is the MI Programmers Mailing List!
| To submit a new message, send your mail to MI400@midrange.com.
| To subscribe to this list send email to MI400-SUB@midrange.com.
| To unsubscribe from this list send email to MI400-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: dr2@cssas400.com
+---