Re: OS400/Unix authority settings -- MIDRANGE-L

CHGAUT and chmod are not the same at all - different APIs perform their functions - this is the word from IBM partner support - I'm working on NFS security these days.

There are some areas of commonality, however. *PUBLIC is the same, effectively, as "others" in chmod - the 3rd number.

There is only one special value in CHGAUT - *PUBLIC - nothing for owner or group - those are *nix concepts, so the only way to set them all, so far as I know, is chmod.

Can you tell us again how the files will be transferred? Dennis said, I think, that with ftp, the mode (permissions) will not be retained. If they'll give you an NFS share, you can use chmod locally and transfer it - mode will be maintained, I believe.

I still think you might do best with some kind of archive - jar is a command that can create a file compatible with pkZip - tar is available in QShell, too, I believe.

HTH
Vern

On 12/17/2010 10:46 AM, fbocch2595@xxxxxxx wrote:

Is there a chgaut setting that would get me 744?

-----Original Message-----
From: Michael Ryan<michaelrtr@xxxxxxxxx>
To: Midrange Systems Technical Discussion<midrange-l@xxxxxxxxxxxx>
Sent: Fri, Dec 17, 2010 11:34 am
Subject: Re: OS400/Unix authority settings

Try 744.
On Fri, Dec 17, 2010 at 11:24 AM,<fbocch2595@xxxxxxx> wrote:
I hear you but what can I say, they're telling me the way I must send them
the file. After using Scott's settings I'm not at this setting;

Almost, 704,

-rwx---r-- 1 stpiuser prod

but the group must be able to read the file so I've got to tweak a little
more using CHGAUT...it's a pita for sure.

-----Original Message-----
From: jmmckee<jmmckee@xxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion<midrange-l@xxxxxxxxxxxx>
Sent: Fri, Dec 17, 2010 10:30 am
Subject: Re: OS400/Unix authority settings

I still don't see how local authority can be used to set authority on a
remote
ite. In fact, I could see that as a very bad thing. For example, suppose
you
ould set a fille authority to rwx and owner root on your system and then
have
hat file assume that authority on the remote system. Just sounds wrong.
However, this is easy enough to test. If you change the authorities on the
ocal file to what they are wanting, and send it to them, if the resultant
file
n their system has the wrong authority, it isn't your issue.
John McKee
-----Original message-----
rom: fbocch2595@xxxxxxx
ate: Fri, 17 Dec 2010 07:32:21 -0600
o: midrange-l@xxxxxxxxxxxx
ubject: Re: OS400/Unix authority settings
>
The headache is that the business (tradiing) partner is calling the shots
and
f the file doesn't get to their system with the proper authority they
reject
t. They're a well known data center in KC.

-----Original Message-----
From: jmmckee<jmmckee@xxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion<midrange-l@xxxxxxxxxxxx>
Sent: Thu, Dec 16, 2010 4:13 pm
Subject: Re: OS400/Unix authority settings

I can see that setting authorities on the local system. And, if you are
using
> TP, you might be able to set authority on the remote system. But, why is
data
> uthority on the remote system your headache? Everything I have ever done
with
> emote file sending has always been with the remote site performing that
task.
> John McKee

----Original message-----
rom: fbocch2595@xxxxxxx
ate: Thu, 16 Dec 2010 15:46:05 -0600
o: midrange-l@xxxxxxxxxxxx
ubject: Re: OS400/Unix authority settings
>
So, you think just strqsh then chmod 644 filename will do it? That's not
too
> ainful, I guess.

-----Original Message-----
From: BMay@xxxxxxxxx
To: Midrange Systems Technical Discussion<midrange-l@xxxxxxxxxxxx>
Sent: Thu, Dec 16, 2010 3:15 pm
Subject: Re: OS400/Unix authority settings

The simplest and fastest way to give them exactly what they want is to use
he chmod command in Qshell or PASE. So you could use QP2SHELL or STRQSH
o issue the command "chmod 644 filename"
That's of the top of my head, I am not where I can test it at the moment.
Brian May
roject Lead
anagement Information Systems
aran, Incorporated
tarkville, Mississippi

fbocch2595@xxxxxxx
ent by: midrange-l-bounces@xxxxxxxxxxxx
2/16/2010 01:57 PM
lease respond to
idrange Systems Technical Discussion<midrange-l@xxxxxxxxxxxx>

o
idrange-l@xxxxxxxxxxxx
c
Subject
S400/Unix authority settings

Hi Folks, Merry Christmas/Happy Holidays!
I'm working with a biz partner who's requiring the permissions on IFS
iles to be set to
44(rw-r--r--) on files that I send to his system from our AS400's.
What would be the IFS authority settings, if any, that would correspond to
44(rw-r--r--)? Is there any place to find that info?
Thanks, Frank

--
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
ist
o post a message email: MIDRANGE-L@xxxxxxxxxxxx
o subscribe, unsubscribe, or change list options,
isit: http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx
efore posting, please take a moment to review the archives
t http://archive.midrange.com/midrange-l.

-
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
o post a message email: MIDRANGE-L@xxxxxxxxxxxx
o subscribe, unsubscribe, or change list options,
isit: http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx
efore posting, please take a moment to review the archives
t http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

-
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
o post a message email: MIDRANGE-L@xxxxxxxxxxxx
o subscribe, unsubscribe, or change list options,
isit: http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx
efore posting, please take a moment to review the archives
t http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

-
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
o post a message email: MIDRANGE-L@xxxxxxxxxxxx
o subscribe, unsubscribe, or change list options,
isit: http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx
efore posting, please take a moment to review the archives
t http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

-
his is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
o post a message email: MIDRANGE-L@xxxxxxxxxxxx
o subscribe, unsubscribe, or change list options,
isit: http://lists.midrange.com/mailman/listinfo/midrange-l
r email: MIDRANGE-L-request@xxxxxxxxxxxx
efore posting, please take a moment to review the archives
t http://archive.midrange.com/midrange-l.