Chqnging user profiles

[Guest.Visitor]

Hi, I want to create a command that will change a user profiles password to a default. This can then be used by our helpdesk to reset the passwords - without them having to use chgusrprf. I need to get to pgm to adopt auth?? when the helpdesk execute the command - they get error message thqt they need secadm. I dont want them to have this. Any ideas???? TIA Carl

[Guest.Visitor]

Carl - Check out this thread http://forums.midrangecomputing.com/MCForums.nsf/afc6f463929b6359882567b8001d0b6 6/C9B29B528B3996A68825692600562283?OpenDocument HTH, Steve

[nycsusan@hotmail.com]

Is the object locked? WRKOBJLCK <F4>

[Guest.Visitor]

it is not locked.

[David Abramowitz]

An empty file may be used by an active program. Have you tried the WRKOBJLCK command to see if this is the case? Dave

[Guest.Visitor]

Are there logical files built over this file? Is this file joined to any other files?

[Guest.Visitor]

Yes I made sure and there was no lock on that file. Command I used, WRKOBJLCK OBJ(JUNK/MARTEL) OBJTYPE(*FILE)

[nycsusan@hotmail.com]

Did you verify that a MEMBER of the file is not locked? Use F6 to check if there are any locks at the file member level.

[Guest.Visitor]

Did you press Enter?? Just Kidding :)

[Guest.Visitor]

Hi again, I have tried this and the command works ok. But when a user without SECADM , tries to use it - response is - user needs secadm to change user profile??? Carl

[Guest.Visitor]

Carl - It sounds like the program is not adopting QSECOFR (or equivalent) authority. Use 'DSPPGM library/program' command and check to be sure that the owner of the program is QSECOFR (or equivalent) and that 'User profile' is *OWNER and 'Use adopted authority' is *YES. HTH, Steve

[Guest.Visitor]

The user profile who owns the program (and whose authority is thereby adopted), should have *SECADM. It's likely that theis profile will need *ALLOBJ authority as well in order to actully change other user's profile objects. There is not need to give the owner profile more than *SECADM and *ALLOBJ special authority. jte MC Security Editor

[GlenKerner]

I've written this similar program in every place I've worked. Create the program using QSECOFR and have the USRPRF option as *OWNER. This will allow anybody to be able to change the profiles (if they have access to the cl). I always take it a step further and create a command over the CL. This makes it easier to execute from a command line. It also restricts (using parameters) that only one profile will be done at a time instead of having the program loop until F3 or F12 is pressed

[Guest.Visitor]

HI, Got it!!! I hadn't changed the pgm's owner. It works fine Thanks Carl