View Full Version : Chqnging user profiles
01-01-1995, 02:00 AM
Hi, I want to create a command that will change a user profiles password to a default. This can then be used by our helpdesk to reset the passwords - without them having to use chgusrprf. I need to get to pgm to adopt auth?? when the helpdesk execute the command - they get error message thqt they need secadm. I dont want them to have this. Any ideas???? TIA Carl
11-29-2000, 06:26 AM
Carl - Check out this thread http://forums.midrangecomputing.com/MCForums.nsf/afc6f463929b6359882567b8001d0b6 6/C9B29B528B3996A68825692600562283?OpenDocument HTH, Steve
11-29-2000, 09:41 AM
Is the object locked? WRKOBJLCK <F4>
11-29-2000, 09:42 AM
it is not locked.
11-29-2000, 09:42 AM
An empty file may be used by an active program. Have you tried the WRKOBJLCK command to see if this is the case? Dave
11-29-2000, 09:47 AM
Are there logical files built over this file? Is this file joined to any other files?
11-29-2000, 09:48 AM
Yes I made sure and there was no lock on that file. Command I used, WRKOBJLCK OBJ(JUNK/MARTEL) OBJTYPE(*FILE)
11-29-2000, 09:54 AM
Did you verify that a MEMBER of the file is not locked? Use F6 to check if there are any locks at the file member level.
11-29-2000, 10:34 AM
Did you press Enter?? Just Kidding :)
12-01-2000, 12:19 AM
Hi again, I have tried this and the command works ok. But when a user without SECADM , tries to use it - response is - user needs secadm to change user profile??? Carl
12-01-2000, 05:23 AM
Carl - It sounds like the program is not adopting QSECOFR (or equivalent) authority. Use 'DSPPGM library/program' command and check to be sure that the owner of the program is QSECOFR (or equivalent) and that 'User profile' is *OWNER and 'Use adopted authority' is *YES. HTH, Steve
12-01-2000, 06:34 AM
The user profile who owns the program (and whose authority is thereby adopted), should have *SECADM. It's likely that theis profile will need *ALLOBJ authority as well in order to actully change other user's profile objects. There is not need to give the owner profile more than *SECADM and *ALLOBJ special authority. jte MC Security Editor
12-01-2000, 07:20 AM
I've written this similar program in every place I've worked. Create the program using QSECOFR and have the USRPRF option as *OWNER. This will allow anybody to be able to change the profiles (if they have access to the cl). I always take it a step further and create a command over the CL. This makes it easier to execute from a command line. It also restricts (using parameters) that only one profile will be done at a time instead of having the program loop until F3 or F12 is pressed
12-06-2000, 12:08 AM
HI, Got it!!! I hadn't changed the pgm's owner. It works fine Thanks Carl
Powered by vBulletin® Version 4.1.5 Copyright © 2013 vBulletin Solutions, Inc. All rights reserved.