RE: API to swap GID

["Graap, Ken" <keg@xxxxxxxxxxxxx>]

Thanx Scott ... That's what I was looking for ... Now all I have to do is
figure out if there is a practical way to utilize this API. I want to design
a way to run under a different group profile within a job, without having to
change a user profile's group profile attribute and then SWAP back to the
same user.

I don't want to "reinvent the wheel" if someone has already done this. If
anyone has put something together using these API's I'd love to take a look
at what you've done.

Kenneth

****************************************
Kenneth E. Graap
IBM Certified Specialist
AS/400e Professional System Administrator
NW Natural (Gas Services)
keg@nwnatural.com
Phone: 503-226-4211 x5537
FAX:    603-849-0591
****************************************


-----Original Message-----
From: Scott Klement [mailto:klemscot@klements.com]
Sent: Wednesday, August 07, 2002 3:05 PM
To: 'Midrange'
Subject: Re: API to swap GID



On Wed, 7 Aug 2002, Graap, Ken wrote:
>
> Does anyone know what the API for swapping GID's is and where I can find
> some documentation on it?
>

Not sure what you mean by that... I assume by GID, you mean "group-id"
(but, usually I hear the term "GID" in a Unix context)

Are you looking to change which number represents which group?  Or are
you looking to change a thread/job to run using a different group profile?

The qsysetgid() and qsysetegid() APIs are the UNIX-like way to do this.
They are found in the UNIX-type APIs manual, under (for some odd reason)
the Integrated Filesystem APIs.  Look here:

http://publib.boulder.ibm.com/pubs/html/as400/v4r5/ic2924/info/apis/unix2.ht
m

The native methods of doing this would involve setting the profiles using
"profile handles" or probably better "profile tokens".   These are covered
in the Security API manual, which you'll find here:
http://publib.boulder.ibm.com/pubs/html/as400/v4r5/ic2924/info/apis/sec1.htm


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.