iSeries user profiles in NetWare
When you enroll an iSeries user profile as a user object in NetWare, you can
propagate these iSeries attributes. The fields shown in bold italics are updated
on NetWare every time the iSeries profile changes.
- Profile name
- The name of the user object in NetWare, which corresponds to the iSeries profile
name.
- NDS context
- The context of the NDS tree in which the user profile is to be placed
as a NetWare user object. Specify the NDS context with the CHGNWSA command
(described in Define network server attributes) or the CHGNWSUSRA command (described in Enroll iSeries users on NetWare).
- If you enroll an iSeries group and all its members, the context for each
member is the same as the group context.
- If you enroll a user as a member of multiple groups, and more than one
of those groups is enrolled in an NDS tree, the user object has the same NDS context
as the first group to which it was enrolled.
- If you enroll the main group to which a user belongs, the user object
has the same NDS context as this group.
- If you do not enroll the main group to which a user belongs, but you do
enroll one or more of the supplementary groups, the user object has the same NDS context
as the first supplementary group to which it was enrolled.
- Profile login script
- The name of a login script that is run for a profile when the user logs
in to the NetWare server or NDS tree.
You can define this with the Profile object field of the NDS tree list parameter by
using the CHGNWSUSRA command (described in Enroll iSeries users on NetWare).
- Password
- The iSeries password is used to set the user password on the NetWare servers.
This corresponds to the PASSWORD parameter on either the CRTUSRPRF or CHGUSRPRF
command.
- Password required
- If the iSeries system value QSECURITY is 10, the NetWare user objects that
are created do not require a password to sign on to the server. All other iSeries QSECURITY
levels require that a user object log in with a password.
- Unique password
- If the system value QPWDRQDDIF is 0, the new password does not have
to be unique when it is changed. Any other value for QPWDRQDDIF forces the
user to supply a new password that is unique.
- Password expiration interval
- The number of days a user object's password is valid. This corresponds
to the password expiration interval (PWDEXPITV parameter) on the CRTUSRPRF
or CHGUSRPRF command. If this value indicates to use the system value QPWDEXPITV, iSeries™ uses the system value to set the expiration interval.
- Password expiration date
- You can use the Set password to expired field on the CRTUSRPRF
or CHGUSRPRF command to indicate that a password has expired. If you change
this field to *YES for an iSeries user profile, iSeries changes the Password
expiration date to the day before. For example, if you change the Set password to expired field to *YES on 4/17/97, iSeries sets the password
expiration date on NetWare to 4/16/97.
- Login grace limit
- User objects are allowed 6 more logins after a password has expired.
This is the default.
- Account disabled
- The Status field on the CRTUSRPRF or CHGUSRPRF command is used to indicate
whether the user can log into the NetWare server or NDS tree.
- Text
- The Text description field on an iSeries user profile, which corresponds
to a text description of the user object in NetWare.
You can define this with
the Text parameter using either the CRTUSRPRF or CHGUSRPRF command.