Re: Primary Group Profile object attribute

Ed,

Many thanks! I'll play around with this and see if I can get it to solve
some IFS authority issues.

Patrick

----- Original Message -----
From: "Ed Fishel" <edfishel@us.ibm.com>
To: <midrange-l@midrange.com>
Sent: Monday, May 06, 2002 7:22 AM
Subject: Re: Primary Group Profile object attribute


>
> Patrick,
>
> >Like Ken I've tried to figure out how to use the Primary Group Profile
> >attribute on IFS files in a practical way, but am not having much luck.
> How
> >does one actually create a group of users with PGP? How is it managed?
> Let's
> >say I have 5 users that I want to give access to all files in an IFS
> >directory. How do I set up the user profiles, group profiles, and PGP
> >attribute. An example would be very helpful!
>
> To use primary group authority you need to use a group profile. One way to
> create a group profile is by specifying a GID (group ID number) on the
> CRTUSRPRF command. You can make existing user profiles a member of the
> group by changing their user profile and listing the group profile on
> either the GRPPRF (group profile) or SUPGRPPRF (supplemental groups)
> parameters.
>
> You can change the primary group of an object with the CHGPGP command. The
> NEWPGP (new primary group) parameter is used to specify the name of the
> group profile. When a new object is created into the Root(/), QOpenSys, or
> the User-Defined file systems, the object will inherit the primary group
> authority from its parent directory.
>
> For more information, I suggest you get the pdf versions of the Security
> Reference Manual and the Tips and Tools for Securing Your iSeries book.
> Then use the Find menu command to search for "primary group".
>
> Ed Fishel,
> edfishel@US.IBM.COM
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>