7.1.6 Setting the assumed JP1 user function
In JP1/AJS3, the user name JP1 user is used for managing access privileges. Each OS user (a user who executes jobs) is mapped to specific JP1 users. This means that execution requests from hosts other than those defined in the user mapping will be denied.
Under JP1/AJS3's user management scheme, each OS user must be individually mapped to one or more JP1 users. If non-specific OS users will be using JP1/AJS3, each OS user will need to be mapped to a JP1 user, increasing the administrator's workload.
To lessen the task of user mapping, JP1/AJS3 provides a assumed JP1 user function that maps OS users to a single default JP1 user, allowing unmapped OS users to operate JP1/AJS3 with the access privileges of the default JP1 user. (But if an OS user executing a job is registered as a JP1 user, the privileges of that JP1 user still apply.) The assumed JP1 user function can be used when executing commands available in an execution environment for JP1/AJS3 QUEUE jobs and submit jobs. For details about these commands, see 1.5.10(1) Commands available in an execution environment for queue or submit jobs in the manual JP1/Automatic Job Management System 3 Command Reference.
The following describes how to set up the assumed JP1 user function, and provides cautions on usage.
- Organization of this subsection
(1) Setting procedure (Windows)
-
Set user information in JP1/Base.
For details about how to set user information, see 3.1.1(1) Setting user information in the JP1/Automatic Job Management System 3 Configuration Guide.
-
Execute the jpqregguestuser command.
Set the JP1 user registered in step 1 as the default JP1 user.
For the command syntax, see jpqregguestuser in 2. Commands Used during Setup in the manual JP1/Automatic Job Management System 3 Command Reference.
-
Restart JP1/AJS3.
The definition takes effect.
This completes setup of the assumed JP1 user function.
The jpqregguestuser command is also used when clearing the assumed JP1 user function setting.
(2) Setting procedure (UNIX)
-
Stop JP1/AJS3.
Execute the following commands to stop the JP1/AJS3 processes and to check that all processes have stopped:
# /etc/opt/jp1ajs2/jajs_stop#1 # /opt/jp1ajs2/bin/jajs_spmd_status
- #1
-
First check whether the JP1/AJS3 processes are set to stop automatically.
-
Set user information in JP1/Base.
For details about how to set user information, see 13.1.1(1) Setting user information in the JP1/Automatic Job Management System 3 Configuration Guide.
-
Execute the jpqregguestuser command.
Set the JP1 user registered in step 2 as the default JP1 user.
For the command syntax, see jpqregguestuser in 2. Commands Used during Setup in the manual JP1/Automatic Job Management System 3 Command Reference.
-
Restart JP1/AJS3.
The definition takes effect.
This completes setup of the assumed JP1 user function.
The jpqregguestuser command is also used when clearing the assumed JP1 user function setting.
(3) Notes
-
Only one default JP1 user can be set per JP1/AJS3 - Manager host.
-
For the JP1 user defined as the default JP1 user, set user mapping and the JP1 permission level in the same manner as for ordinary JP1 users.
When setting the JP1 permission level, make sure that:
-
The permission level allows all potential operations.
-
The operating environment cannot be corrupted by user errors.
-
In a cluster system, execute the jpqregguestuser command on both the active and standby hosts.
For the jpqregguestuser command syntax, see jpqregguestuser in 2. Commands Used during Setup in the manual JP1/Automatic Job Management System 3 Command Reference.
-