Change NWS Attributes (CHGNWSA)

The Change Network Server Attributes (CHGNWSA) command changes the network server attributes of the system. Many of these attributes can be set on an individual user profile basis using the CHGNWSUSRA command. Many network server commands such as DSPNWSUSR and WRKNWSSTS can specify that information from the network server attributes should be used by specifying *NWSA for a given parameter.

Network server attributes are saved by the Save System (SAVSYS) command. Network server attributes are restored to the system when the operating system is installed.

Restrictions:

This command is shipped with public *EXCLUDE authority. When this command is shipped, authority is issued only to the security officer. The security officer can grant the use of this command to other users.
To make changes to the NDSTREELST, WNTDMNLST, WNTLCLSVRL, or NTWTCPSVRL parameters, you must have *SECADM special authority.
The Windows domain and server names specified in the WNTDMNLST and WNTLCLSVRL parameters must follow the naming conventions of Windows.

Parameters

Keyword	Description	Choices	Notes
PMTCTL	Prompt control	ALL, WINDOWS, NETWARE, WINDOWSNT	Optional, Key, Positional 1
DFTSVRTYPE	Default server type	SAME, WINDOWS, NETWARE, WINDOWSNT	Optional
NDSTREE	NDS tree	Character value, SAME, NONE	Optional
NDSCTX	NDS context	Path name, SAME, ROOT	Optional
NTWTCPPORT	NetWare TCP/IP port	50-50000, *SAME	Optional
NTWTCPSVRL	NetWare/IP server list	Values (up to 100 repetitions): Character value, SAME, NONE	Optional
NDSTREELST	NDS tree list	Single values: SAME, NONE Other values (up to 10 repetitions): Element list	Optional
	Element 1: NDS tree	Character value
	Element 2: User object context	Path name
	Element 3: Default server	Character value, *ANY
	Element 4: Profile object	Path name, *NONE
WNTDMNLST	Windows server domain list	Single values: SAME, NONE Other values (up to 64 repetitions): Element list	Optional
	Element 1: Domain	Character value
	Element 2: User template	Character value, *NONE
	Element 3: Group type	GLOBAL, LOCAL
WNTLCLSVRL	Windows local server list	Single values: SAME, NONE Other values (up to 64 repetitions): Element list	Optional
	Element 1: Server	Character value
	Element 2: User template	Character value, *NONE

Top

Default server type (DFTSVRTYPE)

Specifies the default server type for the system. This attribute is used primarily as a default for those i5/OS commands that support multiple network types.

If the default server type is not set, it is defaulted to *WINDOWS.

*SAME: The default server type does not change.
*WINDOWS or *WINDOWSNT: The default server type for the system is set to *WINDOWS.
Note: *WINDOWS should be used in V5R4 and later releases. The *WINDOWSNT value is supported for compatibility with releases prior to V5R4.
*NETWARE: The default server type for the system is set to *NETWARE.

NDS tree (NDSTREE)

Specifies the name of the default NetWare Directory Services tree used by the system. The tree specified should be the one most often used by iSeries system users when accessing the network.

If the default NetWare Directory Services tree is not set, it is defaulted to *NONE.

*SAME: The NetWare Directory Services tree name does not change.
*NONE: No default NetWare Directory Services tree is specified.
'NDS-tree-name': Specify the name of the default NetWare Directory Services tree.

NDS context (NDSCTX)

Specifies the complete path name of a default NetWare Directory Services context, associated with the tree specified by the NDSTREE parameter, to be used when a user issues i5/OS commands that use NDS objects.

If the default NetWare Directory Services context is not set, it is defaulted to *ROOT.

*SAME: The default NDS context name does not change.
*ROOT: The default NetWare Directory Services context is set to the root of the NDS tree.
'NDS-context': Specify the complete path name of the default NDS context name to be used.

NetWare TCP/IP port (NTWTCPPORT)

Specifies the TCP/IP port number to be used by the system when communicating to NetWare/IP servers in the network.

Valid values range from 50 through 50000. However, some of the ports in the range 1 through 1023 are used by system-supplied TCP/IP applications. If the user specifies one of these ports, it can affect the operation of those applications.

See the assigned numbers RFC for the definition of port numbers currently used by TCP/IP applications.

If the NTWTCPPORT parameter has never been set, it is defaulted to 20199.

*SAME: The default TCP/IP port number does not change.
TCP/IP-port-number: Specify the TCP/IP port number to be used.

NetWare/IP server list (NTWTCPSVRL)

Specifies the TCP/IP names of up to 100 NetWare/IP servers running the Enhanced Integration for NetWare NLM (NetWare loadable module).

If the NTWTCPSVRL parameter has never been set, it is defaulted to *NONE.

*SAME: The list of NetWare/IP servers does not change.
*NONE: When *NONE is specified, the system will not use TCP/IP as the communication protocol when communicating to NetWare servers in the network.
'NetWare/IP-server-name': Specify the TCP/IP name of a NetWare/IP server running the Enhanced Integration for NetWare NLM.

NDS tree list (NDSTREELST)

Specify a list of default NetWare Directory Services tree information used by the iSeries network administration support to enroll profiles into the NDS tree. Each entry in the list will contain an NDS tree name and a list of default attributes associated with that tree. If there are no entries in the list, then the default is to do no further enrollment of any i5/OS profiles into the network.

Up to 10 entries can be specified for this parameter. An entry consists of a value from each of the following elements.

If the default NetWare Directory Services tree list is not set, it is defaulted to *NONE.

Single values

*SAME: The default NDS tree list entries do not change.
*NONE: When *NONE is specified, the default is to not enroll any i5/OS profile updates.

Element 1: NDS tree

'NDS-tree-name': Specify the name of the NetWare Directory Services tree where the iSeries network administration support will enroll i5/OS profiles. The remaining elements describe the network server attributes which are associated with this NDS tree.

Element 2: User object context

'NDS-user-object-context': Specify the NDS context where profiles will be enrolled into the NDS tree.

Element 3: Default server

The third element in this parameter Specifies the default NetWare Directory Services server to be used by the system when enrolling profiles into the NDS tree.

*ANY: The system selects any active server to use when accessing the NDS tree.
'NDS-server-name': Specify the name of the default NDS server to be used by the system when enrolling profiles into the NDS tree. If this server is unavailable at the time the request is handled, the system attempts to find an active server that is available to handle the request.

Element 4: Profile object

The fourth element in this parameter specifies a default NetWare Directory Services profile object that contains the profile login script to be used by the user when logging into the network. The NetWare distinguished name must be specified for this element.

*NONE: No profile login script is used by the NetWare user.
'NDS-profile-object-name': Specify the distinguished name of the default NDS profile object containing the profile login script to be used by a user when logging into the network.

Windows server domain list (WNTDMNLST)

Specifies a default list of Windows domains that will be used by the i5/OS user enrollment support to determine into which Windows domains i5/OS profiles are enrolled.

Each entry in the list will contain a domain, a user account template name, and a group type. The user account template name is the name of a Windows user identity that is to be used when creating new Windows users.

Up to 64 entries can be specified for this parameter. An entry consists of a value from each of the following elements. A domain name must be entered for each entry and must be unique within the list.

If the WNTDMNLST parameter has never been set, it is defaulted to *NONE.

Single values

*SAME: The value does not change.

*NONE: When *NONE is specified, the default is to not enroll i5/OS profiles into Windows domains.

Element 1: Domain

'domain-name': Specify the name of the Windows domain where the i5/OS user enrollment support will enroll i5/OS profiles.

Element 2: User template

Specifies the name of a Windows user that can be used as a template when creating new Windows users in the Windows domain.

Note: Changing this value will not affect Windows users that are already enrolled in the domain.

*NONE: No Windows user account template is used when creating a new user identity in the Windows domain.
'User-account-template-name': Specify the name of a Windows user account to be used when creating new Windows user identities in the domain.

Element 3: Group type

Specifies the type of group to be created in the Windows domain. This element is only used when enrolling group profiles.

*GLOBAL: A global group is created in the Windows domain.
*LOCAL: A local group is created in the Windows domain.

Windows local server list (WNTLCLSVRL)

Specifies a default list of Windows servers that will be used by the i5/OS user enrollment support to determine in which local Windows servers to enroll i5/OS profiles. Only those server names associated with locally configured Integrated xSeries Servers can be specified in this list.

Each entry in the list will contain a server name and associated user account template name. The user account template name is the Windows user account to be used when creating new Windows user identities on the server.

Up to 64 entries can be specified for this parameter. An entry consists of a value from each of the following elements. A server name must be entered for each entry and must be unique within the list.

If the WNTLCLSVRL parameter has never been set, it is defaulted to *NONE.

Single values

*SAME: The value does not change.

*NONE: When *NONE is specified, the default is to not enroll i5/OS profiles into local Windows servers.

Element 1: Server

'server-name': Specify the name of a Windows local server where the i5/OS user enrollment support will enroll i5/OS profiles. This server must be a locally configured Integrated xSeries Server.

Element 2: User template

Specifies the name of a Windows user that can be used as a template when creating new Windows user identities on the local server.

*NONE: No Windows user account template is used when creating a new user identity on the Windows server.
'User-account-template-name': Specify the name of a Windows user account to be used when creating new Windows user identities on the local server.

Examples

Example 1: Setting Network Server Attributes for Windows

CHGNWSA   DFTSVRTYPE(*WINDOWS)
          WNTDMNLST((DMN01 USRTMP1) (DMN02))
          WNTLCLSVRL((LCLSVR1 TMPL1) (LCLSRV2 *NONE))

The default server type is set to *WINDOWS. The default Windows domain list will be set to enroll profiles into domain DMN01 using user account USRTMP1 and into domain DMN02. Any Windows groups that are created in the domain will be created as global groups.

The Windows local server default list will be set to enroll profiles into local server LCLSVR1 using user account template TMPL1 and into local server LCLSRV2.

Example 2: Setting Network Server Attributes for NetWare

CHGNWSA   NDSTREE(NWTREE1)
          NDSCTX(.MARKETING.HDQTRS.IBM)
          NDSTREELST(NWTREE1 NDSSVR1
                     MARKETING.HDQTRS.IBM *NONE)
          NTW3SVRLST(NTW3SVR2 NTW3SVR3)

The above command will change the system default NDS tree to be NWTREE1 and the default context to MARKETING.HDQTRS.IBM. The tree list consists of one entry for NDS tree NWTREE1 with a default server of NDSSVR1, default user object context of MARKETING.HDQTRS.IBM and no default profile object name. The NetWare 3.12 default server list is set to include servers NTW3SVR2 and NTW3SVR3.

Example 3: Setting Network Server Attributes for NetWare/IP

CHGNWSA   NDSTREE(NWTREE1)
          NDSCTX(.MARKETING.HDQTRS.IBM)
          NDSTREELST(NWTREE1 NTWS1
                     MARKETING.HDQTRS.IBM *NONE)
          NTW3SVRLST(NTWS2 NTWS3)
          NTWTCPSVRL(NTWS1 NTWS2)

The above command will change the system default NDS tree to be NWTREE1 and the default context to MARKETING.HDQTRS.IBM. The tree list consists of one entry for NDS tree NWTREE1 with a default server of NTWS1, default user object context of MARKETING.HDQTRS.IBM and no default profile object name. The NetWare 3.12 default server list is set to include servers NTWS2 and NTWS3. The NetWare/IP default server list is set to include servers NTWS1 and NTWS2. Thus, NTWS1 and NTWS3 will use TCP/IP as the communication protocol.