97 lines
5.9 KiB
HTML
97 lines
5.9 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Restore user profiles" />
|
||
|
|
<meta name="abstract" content="Some changes may be made to a user profile when it is restored." />
|
||
|
|
<meta name="description" content="Some changes may be made to a user profile when it is restored." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzamvrestoresecinfo.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="restoreuserprof" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Restore user profiles</title>
|
||
|
|
</head>
|
||
|
|
<body id="restoreuserprof"><a name="restoreuserprof"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Restore user profiles</h1>
|
||
|
|
<div><p>Some changes may be made to a user profile when it is restored.</p>
|
||
|
|
<div class="p"> The following applies: If profiles are being restored individually (RSTUSRPRF
|
||
|
|
USRPRF(*ALL) is not specified), SECDTA(*PWDGRP) is not requested, and the
|
||
|
|
profile being restored does not exist on the system, these fields are changed
|
||
|
|
to *NONE: <ul><li>Group profile name (GRPPRF)</li>
|
||
|
|
<li>Password (PASSWORD)</li>
|
||
|
|
<li>Document password (DOCPWD)</li>
|
||
|
|
<li>Supplemental group profiles (SUPGRPPRF)</li>
|
||
|
|
</ul>
|
||
|
|
Product passwords are changed to *NONE, so they will be incorrect after
|
||
|
|
restoring an individual user profile that did not exist on the system. <ul><li>If profiles are being restored individually (RSTUSRPRF USRPRF(*ALL) is
|
||
|
|
not specified) SECDTA(*PWDGRP) is not requested, and the profile exists on
|
||
|
|
the system, the password, document password, and group profile are not changed.
|
||
|
|
User profiles can be restored individually with the password and group information
|
||
|
|
restored from the save media by specifying the SECDTA(*PWDGRP) parameter on
|
||
|
|
the RSTUSRPRF command. *ALLOBJ and *SECADM special authorities are required
|
||
|
|
to restore the password and group information when restoring individual profiles.
|
||
|
|
Product passwords restored with the user profile will be incorrect after restoring
|
||
|
|
an individual user profile that existed on the system, unless the SECDTA(*PWDGRP)
|
||
|
|
parameter is specified on the RSTUSRPRF command.</li>
|
||
|
|
<li>If all user profiles are being restored to your system, all the fields
|
||
|
|
in any profiles that already exist on the system are restored from the save
|
||
|
|
media, including the password. <div class="note"><span class="notetitle">Note:</span> <ol><li>User Profiles saved from a system with a different password level (QPWDLVL
|
||
|
|
system value) than the system that is being restored may result in having
|
||
|
|
a password that is not valid on the restored system. For example, if the saved
|
||
|
|
user profile came from a system that was running password level 2, the user
|
||
|
|
could have a password of ″This is my password″. This password would not be
|
||
|
|
valid on a system running password level 0 or 1. </li>
|
||
|
|
<li>Keep a record of the security officer (QSECOFR) password associated with
|
||
|
|
each version of your security information that is saved to make sure you can
|
||
|
|
sign on to your system if you need to do a complete restore operation.</li>
|
||
|
|
</ol>
|
||
|
|
</div>
|
||
|
|
You can use DST (Dedicated Service Tools) to reset the password
|
||
|
|
for the QSECOFR profile. See Service tools topic in the Information Center
|
||
|
|
for instructions. See “Prerequisite and related information” on page xvi for
|
||
|
|
more information about accessing the Information Center.</li>
|
||
|
|
<li>If a profile exists on the system, the restore operation does not change
|
||
|
|
the uid or gid.</li>
|
||
|
|
<li>If a profile does not exist on the system, the uid and gid for a profile
|
||
|
|
are restored from the save media. If either the uid or the gid already exists
|
||
|
|
on the system, the system generates a new value and issues a message (CPI3810).</li>
|
||
|
|
<li>*ALLOBJ special authority is removed from user profiles being restored
|
||
|
|
to a system at security level 30 or higher in either of these situations:<ul><li>The profile was saved from a different system and the user performing
|
||
|
|
the RSTUSRPRF does not have *ALLOBJ and *SECADM special authorities.</li>
|
||
|
|
<li>The profile was saved from the same system at security level 10 or 20.</li>
|
||
|
|
</ul>
|
||
|
|
<div class="note"><span class="notetitle">Note:</span> The system uses the machine serial number on the system and on
|
||
|
|
the save media to determine whether objects are being restored to the same
|
||
|
|
system or a different system.</div>
|
||
|
|
*ALLOBJ special authority is not removed
|
||
|
|
from these IBM-supplied profiles: <ul><li>QSYS (system) user profile </li>
|
||
|
|
<li>QSECOFR (security officer) user profile </li>
|
||
|
|
<li>QLPAUTO (licensed program automatic install) user profile </li>
|
||
|
|
<li>QLPINSTALL (licensed program install) user profile</li>
|
||
|
|
</ul>
|
||
|
|
</li>
|
||
|
|
</ul>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzamvrestoresecinfo.htm" title="Recovering your system often requires restoring data and associated security information.">Restore security information</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|