Table of Contents

Search

  1. Preface
  2. Introduction to PowerExchange
  3. DBMOVER Configuration File
  4. Netport Jobs
  5. PowerExchange Message Logs and Destination Overrides
  6. SMF Statistics Logging and Reporting
  7. PowerExchange Security
  8. Secure Sockets Layer Support
  9. PowerExchange Alternative Network Security
  10. PowerExchange Nonrelational SQL
  11. PowerExchange Globalization
  12. Using the PowerExchange ODBC Drivers
  13. PowerExchange Datatypes and Conversion Matrix
  14. Appendix A: DTL__CAPXTIMESTAMP Time Stamps
  15. Appendix B: PowerExchange Glossary

Authorization to Run pwxcmd and infacmd pwx Commands on Linux, UNIX, and Windows

Authorization to Run pwxcmd and infacmd pwx Commands on Linux, UNIX, and Windows

In addition to authenticating user credentials for pwxcmd and infacmd pwx program use, you can configure PowerExchange to authorize users to run specific pwxcmd and infacmd pwx commands.
On the system that is the target of pwxcmd or infacmd pwx commands, set the first parameter of the SECURITY statement to 2. Then, configure a sign-on file on each PowerExchange installation that is the target of pwxcmd or infacmd pwx commands.
In the PowerExchange sign-on file, you can create authorization groups, which PowerExchange uses in conjunction with user definitions to authorize users to run one or more pwxcmd or infacmd pwx commands. If you do not create specific authorization groups to authorize users to issue commands, you must include the following statements in the sign-on file on all target systems to which users issue commands:
AUTHGROUP=(ANY,COMMAND=(*)) USER=(*,ALLOW=Y,AUTHGROUP=ANY)
When a user issues a command, PowerExchange checks the PowerExchange sign-on file to determine whether the user ID supplied on the command is authorized to run the command.
To authenticate users to run pwxcmd and infacmd pwx commands, configure PowerExchange to check user credentials for the pwxcmd and infacmd pwx programs.