jbssetacl
- Organization of this page
Function
The jbssetacl command registers operating permissions for individual JP1 users and DS group. The JP1 user can be a standard user, linkage user, or DS user.
Format
jbssetacl [-h logical-host-name]
[-s authentication-server-name]
-f definition-file-name
[-no]
[-ds#]- #:
-
The -ds option can be specified in Windows only.
Required execution permission
In Windows: Administrators (If User Account Control (UAC) for Windows is enabled, you must execute the command from the administrator console.)
In UNIX: Superuser or JP1/Base administrator permission
Command directory
- In Windows:
-
installation-folder\bin\
- In UNIX:
-
/opt/jp1base/bin/
Arguments
-h logical-host-name
When using JP1/Base in a cluster system, you register JP1 user operating permissions with the primary authentication server configured on the logical host specified with this option.
-s authentication-server-name
Specify the authentication server on which you want to register the JP1 user and DS group operating permissions. When you specify this option, the -h option is ignored, even if it is specified.
-f definition-file
Specify the name of the user permission definition file containing JP1 user and DS group operating permissions. The file format is the same as that of the user permission level file (JP1_UserLevel). You can give the user permission definition file any name and store it in any location. For details about the user permission definition file, see User permission definition file in 16. Definition Files.
-no
When this option is specified, if operating permission is already given to the specified JP1 user and DS group, an error is returned and the operating permission for the JP1 user and DS group is not registered.
-ds
This option can be specified in Windows only.
Specify this option to register operating permission to a DS user or DS group. The operating permission to register is the one defined in the JP1 operating permission attribute value for the DS user or DS group registered in the directory server.
Note
-
The -s option takes precedence if you specify both the -h and -s options. If you omit both options, the host name set in the environment variable JP1_HOSTNAME is assumed as the logical host. If you omit both options and nothing is set in JP1_HOSTNAME, the operating permissions are registered for the physical host.
-
When the -ds option is specified, the reload command (jbsaclreload) must be executed.
-
Duplicate registrations of operating permissions are not allowed.
Return values
|
0 |
Normal end |
|
2 |
Invalid arguments |
|
4 |
Insufficient system resource such as memory |
|
8 |
The authentication server has not started or is not responding |
|
12 |
An error occurred in the authentication server side when a DS user was used |
|
16 |
An error occurred in processing of the authentication server. |
|
32 |
An error occurred during initialization of the communication functionality |
|
64 |
File format error |
|
128 |
Inconsistency in internal processing (a C++ exception) |
|
255 |
Other error |