CL Command Reference - CHGNWSUSRA
CL Command List > CHGNWSUSRA Reference
Description:
The Change Network Server User Attributes (CHGNWSUSRA) command is used to change network server attributes for an i5/OS user or group profile that operate in a networking environment. This command can be used to do the following:
1. Set network server attributes for a specific user or group profile. For example, the default NetWare Directory Services Tree name could be set for a specific user profile.
2. For NetWare networks, the network server attributes can be set up so that this user or group profile will be enrolled into the NetWare network. Where the profile is enrolled depends on the values specified by the NDSTREELST parameter.
3. For Windows networks, the network server attributes can be set so that a user or group profile will be enrolled into one or more Windows domains or local servers. When enrolling into a Windows local server, the server must be associated with a locally attached Integrated xSeries Server. Where the profile is enrolled depends on the values specified by the WNTDMNLST and WNTLCLSVRL parameters. When an i5/OS user is enrolled, a matching Windows user identity is created in the Windows domain or on the Windows local server. When an i5/OS group profile is enrolled into a Windows domain or local server, a matching Windows group is created in the domain or local server. All i5/OS user profiles that are defined in the group are enrolled into the domain or local server and added to the Windows groups that are currently defined by the user account template.
Network server user attributes are saved by the Save System (SAVSYS) and Save Security Data (SAVSECDTA) commands. Network server user attributes are restored to the system when the user profile is restored. The Restore User Profiles (RSTUSRPRF) command can be used to restore user profiles and the network server user attributes associated with them.
Restrictions:
1. Only a user with *OBJMGT and *USE authorities to the user profile being changed, can specify this command.
2. To make changes to the NDSTREELST, WNTDMNLST, or WNTLCLSVRL parameters, a user must have *SECADM special authority.
3. The Windows domain and server names specified in the WNTDMNLST and WNTLCLSVRL parameters must follow the naming conventions of Windows.
Examples:
Example 1: Enrolling a user into a Windows network
CHGNWSUSRA USRPRF(BOB) DFTSVRTYPE(*WINDOWS)
WNTDMNLST((DMN01 USRTMP1) (DMN02 *NONE))
WNTLCLSVRL((LCLSVR1 TMPL1) (LCLSRV2 *NONE))
The above command will change the network server user attributes for user profile BOB. BOB¡¯s default server type is set to *WINDOWS.
The i5/OS user enrollment support will enroll user BOB into domain DMN01 using user account template USRTMP1 and also into domain DMN02.
The i5/OS user enrollment support will also enroll user BOB into local server LCLSVR1 using user account template TMPL1 and also into local server LCLSRV2.
Example 2: Enrolling a user into a NetWare network
CHGNWSUSRA USRPRF(DENNIS) NDSTREE(NWTREE1)
NDSCTX(.MARKETING.HDQTRS.IBM)
NDSTREELST(*NWSA)
NTW3SVRLST(NTW3SVR2 NTW3SVR3)
The above command will change the network server user attributes for user profile DENNIS. The default NDS tree will be set to NWTREE1 and the default context to MARKETING.HDQTRS.IBM.
The NDS tree list from the system network server attributes is used. The i5/OS user enrollment support will enroll user DENNIS into each tree specified in the tree list. The NetWare 3.12 server list is set to include servers NTW3SVR2 and NTW3SVR3. User DENNIS will also be enrolled into both of these servers.