RE: Authorities after a restore. -- SECURITY400

Jim,

I just restored one library, actually, I cleared the library first and then
I restored it allow object differences was set to *all. I didn't restore any
profiles and I run RSTAUT after the restore.

I think you are right when you say that TSTOWNER is no longer a group
profile. This profile has been in the system for ever, and to make it worst
there are other library where TSTOWNER acting as a group profile. There is
only two objects in the system with this name, the group profile and the
message queue.

How can I know if TSTOWNER is a group profile?. I compared this profile
against other group profile we have in the system and seems to be fine.

Thanks.

Nilda Mejias.
System Development
Collectcorp Inc.
-----Original Message-----
From: Jim Franz [mailto:franz400@triad.rr.com]
Sent: Wednesday, April 03, 2002 8:41 PM
To: security400@midrange.com
Subject: Re: [Security400] Authorities after a restore.


it appears TSTOWNER is no longer a group profile?
Did you restore a lib where the saved lib had diff authorities than lib
already on the system?
and not use restore option to allow object differences?
You job log of the restore should explain exactly what & why it did this.
Did you restore more than just the lib but also profiles? and restore the
profiles first?
Have you run RSTAUT after restore to restore private authorities? (check
logs above
before doing this).
jim

----- Original Message -----
From: "Nilda Mejias" <nmejias@collectcorp.com>
To: "Midrange Security 400 List (E-mail)" <security400@midrange.com>
Sent: Wednesday, April 03, 2002 6:19 PM
Subject: [Security400] Authorities after a restore.


> Hello everyone,
>
> I restored a library from a tape backup, after the restore the group
profile
> TSTOWNER lost all the authorities over the library and the objects in this
> library.
>
> Could somebody, please, tell me how can I give a group profile its
> authorities back ? I've tried everything I know and I can't get it done.
>
> I tried with WRKOBJ command, then F6 to add a new user, this allow me to
add
> the user TSTOWNER but all users in the group profile still without
authority
> over the library and the objects. I've tried EDTOBJAUT and it is the
> something, I tried GRTOBJAUT and doesn't work either.
>
> I solved the problem, temporary, giving authority over all objects in the
> library to one of the users in that group using GRTOBJAUT command, but I
> can't believe I have to do this for each user in the group.
>
> This is what I have for the library I restored:
>
>             Object
>  User        Group       Authority
>  *GROUP      CCPOWNER    *ALL
>  *GROUP      QPGMR       *ALL
>  *PUBLIC                 *EXCLUDE
>
> If I add the user TSTOWNER I get:
>
>
>                          Object
> User        Group       Authority
> *GROUP      CCPOWNER    *ALL
> *GROUP      QPGMR       *ALL
> TSTOWNER                *USE
> *PUBLIC                 *EXCLUDE
>
> I think my problem will be solved if I get:
>
>                         Object
> User        Group       Authority
> *GROUP      CCPOWNER    *ALL
> *GROUP      QPGMR       *ALL
> *GROUP      TSTOWNER *USE
> *PUBLIC                 *EXCLUDE
>
> How can I get the list above ? or Do I am hallucinating and this can't be
> done?.
>
> Our security guy have left the company and my boss want me to take the
> challenger, I am reading the Basic System Security and planning book and I
> haven't found anything that help me with this problem and other issues I
> have found in our system security. There is another book that you
recommend
> ?.
>
> Please, any help will be great appreciated.
>
> Nilda Mejias.
> System Development
> Collectcorp Inc.
> _______________________________________________
> This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
> To post a message email: Security400@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/security400
> or email: Security400-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/security400.
>


_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/security400
or email: Security400-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.