L.3 Setting up an environment for JP1/Base administrators on a logical host
On a logical host, the ability of JP1/Base administrators to use JP1/Base depends on whether this setting is enabled on the physical host. The following describes how to set up an environment in which JP1/Base administrators can use JP1/Base on a logical host. These tasks must be performed by the JP1/Base system administrator.
- Organization of this subsection
(1) Setting up an environment for JP1/Base administrators on an existing logical host
- In a non-cluster environment:
-
-
Mount the shared directory.
-
Execute the following command to allow JP1/Base administrators to operate JP1/Base:
jbssetadmingrp -s JP1-administrators-group
-
From the command output in step 2, check whether the setting to allow JP1/Base administrators to operate JP1/Base is enabled on the physical and logical hosts.
Check the messages corresponding to each host in the command output.
If the command output indicates that the setting is disabled on a host, mount the host and repeat step 2.
-
Execute the following command and check whether the setting to allow JP1/Base administrators to operate JP1/Base is enabled on all logical hosts.
jbssetadmingrp -v
-
- In a cluster environment
-
To allow JP1/Base administrators to operate JP1/Base in a cluster environment, the name and ID of the JP1administrators group must be the same on the primary and secondary nodes.
-
Execute the following command on the primary node to allow JP1/Base administrators to operate JP1/Base:
jbssetadmingrp -s JP1-administrators-group
-
From the command output in step 1, check whether the setting to allow JP1/Base administrators to operate JP1/Base is enabled on the physical and logical hosts.
Check the messages corresponding to each host in the command output.
If the command output indicates that the setting is disabled on a host, mount the host and repeat step 1.
-
Execute the following command on the primary node to check whether the setting to allow JP1/Base administrators to operate JP1/Base is enabled on all logical hosts:
jbssetadmingrp -v
-
Execute the following command on the secondary node to allow JP1/Base administrators to operate JP1/Base.
jbssetadmingrp -s JP1-administrators-group
-
From the command output in step 4, check whether the name and gid of the JP1 administrators group are the same on the primary and secondary nodes.
If the values do not match, change the setting in the OS and then repeat step 4. The message KAVA1829-W is output for the logical host but can be ignored.
-
Fail over all logical hosts to the standby node.
-
Execute the following command on the secondary node and check whether the setting to allow JP1/Base administrators to operate JP1/Base is enabled on all logical hosts:
jbssetadmingrp -v
If the JP1 administrators group name and gid on the secondary node do not match those on the primary node, fail all logical hosts back to the primary node, change the setting in the OS, and then repeat step 4.
-
(2) Setting up an environment for JP1/Base administrators on a new logical host
When you create a new logical host, the files from the physical host to which the JP1 administrators group has access rights are copied to the new logical host. You do not need to take any additional steps to enable this feature on the logical host.
(3) Stopping JP1/Base administrators from using JP1/Base on a logical host
-
Mount the shared directory.
-
Execute the following command to disable the setting that allows JP1/Base administrators to operate JP1/Base.
jbssetadmingrp -s sys#
#: system in AIX.
In a cluster environment, execute the command on the primary and secondary nodes.
-
Execute the following command on the physical host where you disabled the setting in step 2.
jbssetadmingrp -v
-
From the command output in step 3, make sure the setting that allows JP1/Base administrators to operate JP1/Base is disabled on the logical hosts where you disabled the setting.