RE: chgobjown -- MIDRANGE-L

> "needless to say she owns almost everything on the system."
Why?  I own almost nothing on our systems.

My theory is that no physical user should own any objects on the system.
I create "owner" profiles to own objects for applications and set OWNER
(*GRPPRF) in all of the user profiles.  The group profile is NOT the
application owner profile and the "owner" profile cannot sign on.  This
way any user can be deleted with minimal effort. (if they do happen to
own something just use DLTUSRPRF USRPRF(yourprf) OWNOBJOPT(*CHGOWN
ownerprf)

Another big plus to this is that when a programmer comes begging for
*ALLOBJ authority you can just add the "owner" profile to theirs as a
Supplemental group and they will have the equivalent of *ALLOBJ for
their application only.  You can also create application SECADM's who
can only see their own application's profiles this way.

Unfortunately this technique does not work for IFS objects.  You will
need additional strategies for dealing with these if you have any.

Regards,
 
Scott Ingvaldson
iSeries System Administrator
GuideOne Insurance Group

-----Original Message-----
date: Wed, 12 Oct 2005 16:44:14 -0600
from: "William P Hunter" <wphunter@xxxxxxxxxxx>
subject: chgobjown

Our IT manager is leaving after 18 years; needless to say she owns
almost 
everything on the system. Does anyone have recommendations whether to:
a)change ownership to the new IT manager
b)create a IT group profile and set it as the owner
c)change ownership to qdftown
d)your recommendation is...

Thanks Bill Hunter




------------------------------

message: 4
date: Wed, 12 Oct 2005 18:57:43 -0400
from: Al Barsa <barsa@xxxxxxxxxxxxxxxxxxx>
subject: Re: chgobjown


If it ain't broke, don't fix it.

DO NOT CHANGE ALL OF THE OWNERS TO QDFTOWN, this is a profile that
exists
for only when an object is restored whose owner does not exist on the
system.

Al

Al Barsa, Jr.
Barsa Consulting Group, LLC

400>390

"i" comes before "p", "x" and "z"
e gads

Our system's had more names than Elizabeth Taylor!

914-251-1234
914-251-9406 fax

http://www.barsaconsulting.com
http://www.taatool.com
http://www.as400connection.com



 

             "William P

             Hunter"

             <wphunter@hotmail
To 
             .com>                     MIDRANGE-L@xxxxxxxxxxxx

             Sent by:
cc 
             midrange-l-bounce

             s@xxxxxxxxxxxx
Subject 
                                       chgobjown

 

             10/12/2005 06:44

             PM

 

 

             Please respond to

             Midrange Systems

                 Technical

                Discussion

             <midrange-l@midra

                 nge.com>

 

 





Our IT manager is leaving after 18 years; needless to say she owns
almost
everything on the system. Does anyone have recommendations whether to:
a)change ownership to the new IT manager
b)create a IT group profile and set it as the owner
c)change ownership to qdftown
d)your recommendation is...

Thanks Bill Hunter


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.





------------------------------

message: 5
date: Thu, 13 Oct 2005 00:28:36 +0200
from: "Lukas Beeler" <l.beeler@xxxxxxxxxxx>
subject: RE: i5 redundant power supply - needed?

Jerry Draper wrote:
> Our BP configured our new i% 520 with a redundant power supply
> and fan for an additionsl $1300.  Is this really necessary
> considering we have a big pallet of deep cycle batteries giving
> us an hours of battery backup?   

I usually hook the first PSU on the UPS, and the second PSU on a normal,
unprotected line. This guards against UPS failures. And of course
against a PSU failure.

I've been using Dual-PSU's in all my bigger PC servers, and see no
reason to not use this practice on the i5.



------------------------------

message: 6
date: Wed, 12 Oct 2005 19:11:39 -0400
from: "Hewitt, Rory" <rory.hewitt@xxxxxx>
subject: RE: RE: shared storage across many jobs

Elvis,

Can you have a single user space which contains pointers to other user
spaces? When you need to add job information, you go to the 'primary'
user space and run through each of the pointers in there, accessing the
related user space (which you treat simply as memory, since you're just
using a pointer) and checking for a record in each other user space. In
the 'prmary' user space, you'd simply have an array like this:

D MainDS           DS
D  Array                           Dim(10)
D   UsrSpcPtr                  *
D   NbrOfJobs                10I 0

and in the 'secondary' user space you'd have your array of job
structures. You'd still only need to use the QUSPTRUS API once to get
the pointer to the main user space and then have a loop from there. Of
course you'd need to have processing to create more secondary user
spaces as needed, but that's not a problem...

Another option might be to use a user index - it'll certainly be faster
than file I/O, but maybe slower than using one or more user spaces...

HTH,

Rory



------------------------------

message: 7
date: Wed, 12 Oct 2005 19:15:40 -0400 (EDT)
from: "Pete Massiello" <pmassiello@xxxxxxxxxxxxxxxx>
subject: Re: i5 redundant power supply - needed?

Its not required, its just a nice to have.  Its even nicer if you have
two
different sources of power.

Pete

---------------------------- Original Message
----------------------------
Subject: i5 redundant power supply - needed?
From:    "Jerry Draper" <midrangel@xxxxxxxxxxxxx>
Date:    Wed, October 12, 2005 6:23 pm
To:      "Midrange Systems Technical Discussion"
<midrange-l@xxxxxxxxxxxx>
------------------------------------------------------------------------
--

>
>
> Our BP configured our new i% 520 with a redundant power supply and fan
for
> an
> additionsl $1300.  Is this really necessary considering we have a big
> pallet of
> deep cycle batteries giving us an hours of battery backup?
>
> Yeah.  I know the batteries don't replace the power supply but .....
>
> TIA,
>
>
> Jerry Draper
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>




------------------------------

message: 8
date: Wed, 12 Oct 2005 19:22:28 -0400 (EDT)
from: "Pete Massiello" <pmassiello@xxxxxxxxxxxxxxxx>
subject: Re: chgobjown

Create a new profile and set the objects that are owned by the departing
IT Mgr to the new profile. The easy thing is changing object ownership. 
What you won't find is if someone has in a CL program that does a
SBMJOB,
where they submit it for the IT Mgr for example: SBMJOB CMD(some
command)
USER(old it mgr profile).  This would cause the job not to run if you
had
deleted the profile after they left.

With all that said, I am a firm believer to ALWAYS cleanup after someone
leaves, otherwise you just accumulate too much "stuff" on the machine,
and
no one evers goes back to clean up.

JMHO

Pete Massiello

---------------------------- Original Message
----------------------------
Subject: chgobjown
From:    "William P Hunter" <wphunter@xxxxxxxxxxx>
Date:    Wed, October 12, 2005 6:44 pm
To:      MIDRANGE-L@xxxxxxxxxxxx
------------------------------------------------------------------------
--

> Our IT manager is leaving after 18 years; needless to say she owns
almost
> everything on the system. Does anyone have recommendations whether to:
> a)change ownership to the new IT manager
> b)create a IT group profile and set it as the owner
> c)change ownership to qdftown
> d)your recommendation is...
>
> Thanks Bill Hunter
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>




------------------------------

message: 9
date: Wed, 12 Oct 2005 19:38:24 -0400
from: Larry Bolhuis <lbolhuis@xxxxxxxxxx>
subject: Re: i5 redundant power supply - needed?

I spent several hours getting an i5 back on line because a PS failed 
while we were updating the FSP code. Murphy won that one because the 
customer didn't have redundant power. (They do now!)  We configure 
redundant power on every i5 we propose.

  - Larry

Jerry Draper wrote:

>Our BP configured our new i% 520 with a redundant power supply and fan
for an
>additionsl $1300.  Is this really necessary considering we have a big
pallet of
>deep cycle batteries giving us an hours of battery backup?
>
>Yeah.  I know the batteries don't replace the power supply but .....
>
>TIA,
>
>
>Jerry Draper
>  
>