RE: Specifying a user on the SBMJOB

["Graap, Ken" <keg@xxxxxxxxxxxxxxxxxx>]

>The cleanest way would be to create a new communications entry in the
>QCMN subsystem of the remote system that specifies a unique mode
>description and the user id...

Make sure you carefully secure the *MODD and the DDMFILE on the source
system though. I'd suggest, *PUBLIC *EXCLUDE and then defining private
authorities as needed.

This configuration allows access to your remote system without a password! 

Referencing this DDMFILE / *MODD combination when using the SBMRMTCMD
command effectively gives a SOURCE system user the ability to run ANY
command the TARGET system user is authorized to run... 

i.e. SBMRMTCMD CMD('PWRDWNSYS *IMMED') DDMFILE(DDMLib/DDMfile)

Kenneth

--
********************************
         Kenneth  E.  Graap             
    IBM Certified Specialist                 
          AS/400   Professional                   
          System  Administrator                  
 NW Natural - Information Services        
           System Services                         
        503 226 4211 X5537                 
          FAX  503 721 2521                  
      keg@nwnatural.com               
********************************


-----Original Message-----
From: therrin@isaac.net [mailto:therrin@isaac.net]
Sent: Thursday, June 03, 1999 1:56 PM
To: MIDRANGE-L@midrange.com
Subject: Re: Specifying a user on the SBMJOB


>A more secure option may be to create a CL on the remote system to
>submit the Job.  Then have the program use adopted authority to submit
>the job.  This way you do not need to grant any special authorities to
>QUSER.
>
>John Hall

The cleanest way would be to create a new communications entry in the
QCMN subsystem of the remote system that specifies a unique mode
description and the user id you want the remote job to run under.
Then in the DDM file on the local system that you reference in the
SBMRMTCMD, use the mode description you put in the new communication
entry on the remote system that references the user id.  

Terry Herrin
Sr. Programmer/Analyst
New Hanover Regional Medical Center
Wilmington, NC
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---