Re: Primary Group Profile object attribute

Patrick,

>Like Ken I've tried to figure out how to use the Primary Group Profile
>attribute on IFS files in a practical way, but am not having much luck.
How
>does one actually create a group of users with PGP? How is it managed?
Let's
>say I have 5 users that I want to give access to all files in an IFS
>directory. How do I set up the user profiles, group profiles, and PGP
>attribute. An example would be very helpful!

To use primary group authority you need to use a group profile. One way to
create a group profile is by specifying a GID (group ID number) on the
CRTUSRPRF command. You can make existing user profiles a member of the
group by changing their user profile and listing the group profile on
either the GRPPRF (group profile) or SUPGRPPRF (supplemental groups)
parameters.

You can change the primary group of an object with the CHGPGP command. The
NEWPGP (new primary group) parameter is used to specify the name of the
group profile. When a new object is created into the Root(/), QOpenSys, or
the User-Defined file systems, the object will inherit the primary group
authority from its parent directory.

For more information, I suggest you get the pdf versions of the Security
Reference Manual and the Tips and Tools for Securing Your iSeries book.
Then use the Find menu command to search for "primary group".

Ed Fishel,
edfishel@US.IBM.COM