Re: qsyseteuid with QNTC

[Patrick Botz <botz@xxxxxxxxxxxxxxxxxxxxx>]

The profile under which the job is initially running, must have *use
authority to the profile with the UID to which you want to "seteuid" to.
 You can use adopted authority to get the authority to the user profile. In
other words, the program that calls the qsyseteuid() api can be owned by a
profile that has *allobj or a profile that has *use to the profile
represented by the UID you are trying to change to.  Only grant a profile
*use to another profile if it is a "service profile" that cannot be logged
into.

The qsyseteuid() api essentially does the same thing as the profile handle
APIs, but it only changes the profile udner which the job runs (not the
groups).  Note you could also accomplish the same thing by doing a
qsysetegid(), and you wouldn't lose the audit thread for the real profile
making the change.


Patrick Botz

Botz & Associates, Inc.
pcbotz@xxxxxxxxx
Office 507 319 5206
Cell 507 250 5644
http://www.botzandassociates.com

President, Valid Technologies
pcbotz@xxxxxxxxxxxxx
http://www.validtech.com



On Wed, Jul 13, 2011 at 2:33 PM, Michael Ryan <michaelrtr@xxxxxxxxx> wrote:

> Hello all...I'm trying to copy files from the IFS to a QNTC share. If
> I sign on as a specific user, I have the authority to copy. I'm trying
> to use qsyseteuid so I can run the program as any user. I do a WRKJOB
> and see this:
>
> Current user profile  . . . . . . . . . . . :   <special user>
> Job user identity . . . . . . . . . . . . . :   <special user>
>  Set by  . . . . . . . . . . . . . . . . . :     *DEFAULT
>
> So I would think that I have the authority, but I get an 'insufficient
> authority' message when attempting the copy. Is qsyseteuid not the
> right procedure?
>
> Thanks in advance...
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.