Re: Restoring Libraries from one AS400 to Another

[John Earl <johnearl@xxxxxxxxxxxxxxxxxx>]

Howard Weatherly wrote:

> As part of some Y2K testing, we are moving a Library from our production
> AS400 to our test box. Last night, I did an RSTLIB on one of the
> Libraries just to discover that all ov the authorities were revoked.

Howard,

You probably have heard that private authorities to an object are stored in user
profile itself and not in the object.   This means that the fact that I have
*CHANGE authority to the PAYROLL file is recorded as an element of my USRPRF
object, and the PAYROLL file has no direct knowledge of my authority to it. (For
reference, what is stored in the object is the object owner's authority, the
owner's Primary Group profile's authority, and *PUBLIC's authority)

When you saved the library, none of the private authority was saved because the
private authority was not in that library.


> What is the correct way to do this?
>
> In lookinng thru the books, I believe that we need to restore the
> security data, do a RSTLIB then do a RSTAUT. Am I way off base here? Is
> ther a simpler way?

You're right on track.  You have to RSTUSRPRF, RSTLIB, and then issue the RSTAUT
to re-sync the object autorities.   But BE CAREFUL!   Restoring user profiles
will overlay all of the information that is currently in the user profile object
with the user profile information that was saved.   This means that changes to
user profiles on the Y2K box (including password changes) will be overlayed with
the values from the Production box.

Also, the RSTAUT will restore private authorities to  the Production box
settings.  I haven't tested this, but I have every reason to believe that 
objects
that are already on Y2K but not on Production will lose their private
authorities.

HTH,

jte

> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---



--
John Earl                                           johnearl@powertechgroup.com
The PowerTech Group                        206-575-0711
PowerLock Network Security              www.400security.com
The 400 School                                www.400school.com
--


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---