Table of Contents

Search

  1. Preface
  2. Introduction to PowerExchange
  3. DBMOVER Configuration File
  4. Netport Jobs
  5. PowerExchange Message Logs and Destination Overrides
  6. SMF Statistics Logging and Reporting
  7. PowerExchange Security
  8. Secure Sockets Layer Support
  9. PowerExchange Alternative Network Security
  10. PowerExchange Nonrelational SQL
  11. PowerExchange Globalization
  12. Using the PowerExchange ODBC Drivers
  13. PowerExchange Datatypes and Conversion Matrix
  14. DTL__CAPXTIMESTAMP Time Stamps
  15. PowerExchange Glossary

Authorization to Run pwxcmd Commands on i5/OS

Authorization to Run pwxcmd Commands on i5/OS

In addition to authenticating user credentials for pwxcmd program use, you can configure PowerExchange to authorize users to run specific pwxcmd commands.
On the system that is the target of pwxcmd commands, set the first parameter of the SECURITY statement to 2. Then, create security objects, as follows:
  • If you completed a first-time installation, PowerExchange creates security objects automatically.
  • If you migrated from a previous release, run the following upgrade command to create security objects:
    CALL PGM(
    dtllib
    /CRTDTLENVA) PARM('
    datalib
    ')
    Where:
    • dtllib
      is the name of the PowerExchange software library that you entered at installation.
    • datalib
      is the name for the PowerExchange data library that you entered at installation.
To authorize a user to issue a specific pwxcmd command, set the first parameter of the SECURITY statement to 2 on the system that is the target of pwxcmd commands. Then, grant the user access to the security object for the command. For example, to authorize a user to issue a pwxcmd closeforce command to a PowerExchange Listener running on an i5/OS system, grant the user access to the
datalib
/LCLOSFRCE security object on that system.
The following table lists the pwxcmd PowerExchange Listener commands and corresponding security objects:
pwxcmd Command
Security Object
close
LCLOSE
closeforce
LCLOSEFRCE
listtask
LLISTTASK
stoptask
LSTOPTASK
The following table lists the pwxcmd PowerExchange Condense commands and corresponding security objects:
pwxcmd Command
Security Object
condense
CCONDENSE
displaystatus
CDSPSTATUS
fileswitch
CFILSWITCH
shutcond
CSHUTCOND
shutdown
CSHUTDOWN
When a user issues a pwxcmd command, PowerExchange checks security objects in the PowerExchange data library to determine whether the user ID supplied on the pwxcmd program is authorized to run commands.
To authenticate users to run pwxcmd commands, configure PowerExchange to check user credentials for the pwxcmd program.