ADDCADUSR

ADDCADUSR command

This command is used to add all user profiles to the Admin Domain.

It provides the following functions for the initial set up of user and group profiles into the Admin Domain.

Note:  If a user doesn't exist on a node that is part of the Admin Domain, then PowerHA is coded to allow a CRTUSRPRF for that user on that node.  However, the user initiating the ADDCADUSR command must have *SECADM and *IOSYSCFG in their profile.  Adopted authority will not work.

Parameters

FUNCTION - Function to perform

*ADDALL - Adds all user profiles to the Admin Domain.

The *ADDALL function will first attempt to add all group profiles (if not already done with *ADDGRP function first) before adding all individual user profiles.

Note:  IBM (Q*) profiles are excluded from processing

*ADDGRP - Adds all group profiles to the Admin Domain

*HELD - Adds user profiles that were unable to be added dynamically via the CRTUSRPRF exit program(s)

*RESETPWD - Resets the password of all user profiles that have a password of *NONE

After setting the system value QRETSVRSEC to '1' user profiles with a password of *NONE need to be reset with a password of *NONE in order for the admin domain to access them and add them.  The *RESETPWD function does this.

USRPRF - User profiles to process

*ALL - Process all user profiles

*ERROR - Process user profiles that have failed on a previous attempt

File QZRDPWRHA/CADUSRERR will contain a list of the user profiles (Q* profiles and profiles in error) that could not be added.  Using the *ERROR option for user profiles will attempt to add any users that were previously not processed, that were added to the QZRDPWRHA/CADUSRERR error file on a previous attempt.

Note:  IBM (Q*) profiles are excluded from processing

ADMDMN - Administrative domain

*ONLY - Used if only one admin domain exists in the cluster device domain. If more than one exists, and this option is taken, only the first admin domain will be processed.

name - The name of the admin domain to process