Re: PASSTHRU authority

[John Earl <johnearl@xxxxxxxxxx>]

Jeff,


Jeff Carey wrote:

> Currently, on our systems, all DDM/SQL  jobs run under a user called PASSTHRU 
>(is
> this the default?).

No, The default would be QUSER.

> We are running into some problems where PASSTHRU doesn't have
> enough authority, so the operation fails, regardless of the authority of the 
>user
> issuing the command.

Makes sense.  The command on the remote system runs as user PASSTHRU.

> Is there a way for remote jobs like this to use the user's authority?  Does 
>this
> require changing a cmne?

Yes and Yes.

I'll bet that there is a communication entry in QCMN(or whatever comm sbsd 
you're
using), that specifies DEFAULT USER=PASSTHRU.  This will cause incoming request 
that
use that communication entry to automatically run as that user.

You can use a combination of Device Name, and Mode to identify a unique 
communication
entry that does not have a default user associated with it.  This will cause
transactions for this entry to run under the active user's authority on the 
remote
system... provided that the user exists on the remote system, and the system 
value for
QRMTSIGN is set appropriately (*SAMEPRF should work).

I'm doing this off the top of my head, so it's all subject to independent
verification.  Take a peek at the DDM administrators guide to get all the 
correct
steps.  It's not as difficult as I may have made it sound.  :)

hth,

jte

>
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---





+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---