Re: Authorizations needed for OpsNav SQL Performance Monitor

On 5/23/07, CRPence <crp@xxxxxxxxxxxxxxxxxxxx> wrote:<snip>

Wow, Chuck, thank you for that info! I hardly ever deal with PTFs / APARs
anymore, and the connection between the two always seemed to have a missing
link.

On the subject at hand ;-) , I realized that getting to the latest service
pack probably wasn't going to fix anything, unless by some act of God, the
OpsNav SQL perfmon function had been changed to no longer use the QAUGDBLL
file (just let me type in the danged library myself!). But it helps to
realize that it will probably take an act of Congress to get our sysadmins
to do anything about this, and that my chances were better with installing
the service pack than getting the necessary ownership/authority issues
resolved. In fact, I can't even get a response on a request to get the CDs
for iSeries Access v5r4!

Anyway, it appears that you nailed the cause of the problem. Here is the
authority on our dev box, from which I have no problem using the OpsNav
function:
Object . . . . . . . : QAUGDBLL Owner . . . . . . . : QAUTPROF
Library . . . . . : QUSRSYS Primary group . . . : *NONE
Object type . . . . : *FILE ASP device . . . . . : *SYSBAS
Object -----Object------ ------Data-------
User Group Authority O M E A R R A U D E
*ADOPT USER DEF X X X X X X X
*PUBLIC *USE X X X
QAUTPROF *ALL X X X X X X X X X X

The production box, otoh, shows that it was intentionally modified:
Object . . . . . . . : QAUGDBLL Owner . . . . . . . : TECH_SUPPT
Library . . . . . : QUSRSYS Primary group . . . : *NONE
Object type . . . . : *FILE ASP device . . . . . : *SYSBAS
Object
User Group Authority
*PUBLIC *USE

Chuck, since you are familiar with this file and process, are you aware of
any reasons why this particular file should be locked down? I mean, it's a
glorified library list!!!!!!! Is there a security vulnerability?

- Dan