1. Lecture 2 REVIEW of concepts security assistance profiles Library list
Authority
L3C2ops400.ppt

2. AS/400 Architecture Object-based architecture
The Machine Interface (MI) translates instructions from the logical to the physical machine.
The MI isolates the logical machine from the physical
There are many advantages to this:

3. Architecture cont’d Single level storage
main and secondary memory (RAM & disk) are treated as a single mass
no hardware oriented considerations (eg. Managing disk drives)
because memory is managed by internal code, objects can be shared by different jobs.

4. Licensed Programs Licensed Internal Code
Application Development Tools
PDM (you will see this in the first lab)
OfficeVision
similar to MS-Office, but AS/400 based
Communication Support Client Access Mocha
Programming Languages
Pascal, PL/1, Basic, RPG, C, C++, Cobol, Java, SQL, etc.

5. Commonly Used Function Keys
F1 = Help
F2 = Extended Help
F3 = Exit command completely
F4 = Prompt
F5 = Refresh Screen
F9 = Retrieve Previous Command
F12 = Cancel current level and return to previous level in command
F23 = more options
F24 = more functions

6. Using ‘ * ‘ On the AS/400
As a special value when used leading a parameter value. Eg. *all, *libl, *curlib
As a wild card when used as a trailer in a parameter value.
like in DOS e.g. WRKUSRPRF DC234F*

7. Using F4 and ? The ? is used the same way F4 is.
Entered into a command field, it gives you the possible values for the field.
Entered before a command, puts you in prompt mode for that command. Eg. ?CRTLIB

8. Hierarchy of Storing Objects
When an object is created, it is stored in the library specified.
If no library is specified, it is stored in *CURLIB (current library).
If there is no current library, it is stored in QGPL library.
Exception: Libraries, Device Descriptions and User Profiles are always stored in library QSYS.

9. STORAGE HIERARGY
Library: an object whose purpose is to ‘store’ and index other objects. ie. objects are ‘stored’ in libraries.
Files: objects that store data
Members: Source files have many ‘members’ each source program = one member Data Files: most common 1 member only exception multiple members (multi territory, multi company)

10. STRPDM AS/400 Programming Development Manager (PDM)
Select one of the following:
1. Work with libraries
2. Work with objects
3. Work with members
9. Work with user-defined options

11. Work with Members Using PDM - WRKMBRPDM
File QCLSRC
Library OPS234LIB Position to
Type options, press Enter.
2=Edit =Copy 4=Delete 5=Display =Print 7=Re
8=Display description 9=Save 13=Change text 14=Compile 15=Cr
Opt Member Type Text
_2_ BIRTHDAY CLP
___ CH11TIM CLP Chapter 11 CL program demo version
___ LAB4CLP CLP Lab 4 CL program
___ SHELL CLP CL program shell

12. AS/400 Screen Types
Menus: includes menu selections, command line, function keys, header info
Entry: e.g. Command Prompt screen which includes parameter description, input fields, function keys, header info
Information screens: e.g. help screens
List screens: e.g. ‘work with’ screens includes list of objects or members, options, command line, function keys, header info.

13. Some MENU Examples

14. GO “MENU” Command AS400 Menus Menu Description MAIN Main Menu
PROGRAM Programmers Menu
MAJOR Sorts Commands
ASSIST Operator assistance
VERB Commands in alpha order
SECURITY Security related functions
SENECA Students help
etc. etc.

15. or GO CMD??? GO CMDDSP GO CMDWRK GO CMDACT GO CMDUSR
CMDCPY Copy Commands
CMDDSP Display Commands
CMDWRK Work With Commands
CMDLIB Library Commands
CMDMSG Message Commands
CMDOUTQ Output Queue Commands
CMDUSRPRF User Profile Commands
ETC. ETC

16. Verb Menu

17. Physical SECURITY Data Locked access All the digital information
Damage control of
processor, devices and
media from fire, flood
etc.
Data
All the digital information
User Programs, O/S,
Utilities, data integrity
Object based / User based
AS/400 uses a combination
of both to ensure the MOST
secure environment to
operate in.

18. DATA SECURITY cont’d
System Level - system values / levels
user profiles - unique and password protected
controls authorities, ownership,
environment, user group
QSECOFR, QSECADM, QSYSOPR,
QPGMR, QUSER etc…
Object - access authority to object for
each user
authority lists for groups
- *ALL *CHANGE *USE *EXCLUDE

19. special AUTHORITIES required to perform CERTAIN FUNCTIONS
*ALLOBJ *AUDIT *IOSYSCFG
*JOBCTL *NONE *SAVSYS
*SECADM *SERVICE *SPLCTL
See page 22 of text book

20. USER and the associated classes
: User Class - Help :
: :
: The type of user. User class is one of the following: :
: o *PGMR Programmer :
l o *SECADM - Security administrator :
: o *SECOFR - Security officer :
o *SYSOPR - System operator
o *USER User
A user can belong to a group and subsequently
Obtains all the group assigned authorities
and securities

21. Authorization lists - AUTL
OBJECT AUTHORITY
Display Authorization List
Object : OPSPRF Owner : ADMIN
Library : QSYS Primary group : *NONE
Object List Object
User Authority Mgt Opr Mgt Exist Alter Ref
ADMIN *ALL X X X X X X
MOOGK *ALL X X X X X
ABERNS *ALL X X X X X
DMENKEN *ALL X X X X X
LYDIA_LI *ALL X X X X X
CREER *ALL X X X X X
*PUBLIC USER DEF X
Press Enter to continue.
F3=Exit F11=Display data authorities F12=Cancel
F15=Display authorization list objects F17=Top F18=Bottom

22. Authorization lists - AUTL
DATA AUTHORITY
Display Authorization List
Object : OPSPRF Owner : ADMIN
Library : QSYS Primary group : *NONE
Object Data
User Authority Read Add Update Delete Execute
ADMIN *ALL X X X X X
MOOGK *ALL X X X X X
ABERNS *ALL X X X X X
DMENKEN *ALL X X X X X
LYDIA_LI *ALL X X X X X
PANGBORN *ALL X X X X X
CREER *ALL X X X X X
Press Enter to continue.
F3=Exit F11=Nondisplay detail F12=Cancel
F15=Display authorization list objects F17=Top F18=Bottom

23. How the AS/400 finds Objects
When an object is created, it is created ‘in’ a particular library.
To access an object, the AS/400 needs to know what library the object is in.
You can prompt (CL) Commands for required parameters such as object name and library name.
*LIBL is the default entry for a library parameter name request

24. Qualified Name vs SIMPLE Name
If you specify an object name and library, it is called a qualified name) e.g. Call OPS400LIB/PGM01
if you just use the object name, it is called a simple name. The *LIBL is used to find the object .e.g. Call PGM01

25. Library Lists type *LIBL
A list of Libraries, in order of importance
Similar to the DOS ‘Path’ concept
Each Job has it’s own library list (Can be inherited)
It determines where a Job finds Objects when SIMPLE naming is used

26. Library Lists cont’d A Library List consists of 4 parts:
System Libraries (up to 15)
Product Libraries (none, 1 or 2)
Current Library(1 only)
User Library ( remaining)
Your library list can have up to 250 entries
To view your library list - DSPLIBL

27. Library List cont’d

28. Library List cont’d
Determine where a Job finds Objects when SIMPLE NAMING is used v.s ???????????????

29. Searching for an object

30. How / when is a Library List created?
When you sign on (start a session), your library list is built from:
QSYSLIBL (system value)
QUSRLIBL (system value)
Current library from User Profile
INHERETED from the parent job (process).
Product libraries are added as needed by the system

31. System Values These values define what the default values will be.
You can’t change them, but you can look at them.
See page 4 of text for examples

32. System Values are used for Control and configuration attributes
System values are AS/400 attributes that allow each installation to customize the machine to the organization’s own needs and specifications.
-The categories of system values include :
Date and time System control Library list values Editing values Allocation values Security values Storage values Message and logging values
DSPSYSVAL QDATE

33. MAIN AS/400 Main Menu System: ODIN Select one of the following:
1. User tasks
2. Office tasks
3. General system tasks
4. Files, libraries, and folders
5. Programming
6. Communications
7. Define or change the system
8. Problem handling
9. Display a menu
10. Information Assistant options
11. Client Access/400 tasks
90. Sign off
Selection or command
===> DSPSYSVAL <F4>
F3=Exit F4=Prompt F9=Retrieve F12=Cancel F13=Information Assistant
F23=Set initial menu

34. Display System Value (DSPSYSVAL)
Type choices, press Enter ____________ F4
System value QABNORMSW, QACGLVL...
Output * *, *PRINT
Specify Value for Parameter SYSVAL
Type choice, press Enter.
System value
QABNORMSW QAUDLVL
QACGLVL QAUTOCFG
QACTJOB QAUTORMT
QADLACTJ QAUTOSPRPT
QADLSPLA QAUTOVRT
QADLTOTJ QBASACTLVL
QALWOBJRST QBASPOOL
QALWUSRDMN QBOOKPATH
QASTLVL QCCSID
QATNPGM QCENTURY
QAUDCTL QCFGMSGQ
QAUDENDACN QCHRID
QAUDFRCLVL QCHRIDCTL
F3=Exit F5=Refresh F12=Cancel F13=How to use this display F24=More keys

35. SECURITY RELATED SYSTEM VALUES
QAUDJRN QAUDLVL QCRTAUT
QDSPSGNINF QMAXSIGN QMAZSGNACN
QLMTDEVSSN QINACTIT QINACTMSGQ
QDSCJOBITV QUPSMSGQ QUPSDLYTIM
QPWRRSTIPL QSECURITY

36. Display System Value (DSPSYSVAL)
Type choices, press Enter.
System value > QSECURITY...
Output * *, *PRINT
<ENTER>
Display System Value
System value : QSECURITY
Description : System security level
System security level : =Physical security only (no longer
supported)
20=Password security only
30=Password and object security
40=Password, object, and operating
system integrity
50=Password, object, and enhanced
operating system integrity
5 LEVELS USER DEPENDEND AND ASSIGNED BY THE SYSADM

37. Some important security related system values are
Display System Value
System value : QCRTAUT
Description : Create default public authority
Create default public
authority : *CHANGE *CHANGE
*ALL
*USE
*EXCLUDE
Some important security related system values are
QMAXSIGN QLMTDEVSSN QINACTITV

38. AUTHORITY System value . . . . . : QCRTAUT
Description : Create default public authority
Create default public
authority : *CHANGE *CHANGE
*ALL
*USE
*EXCLUDE

39. Assistance Levels
Determines how much information is displayed and how it is formatted.
Basic, Intermediate, Advanced, default on USRPRF
Page 19 in text.
Try it out for yourself using the WRKSPLF command and function key F21

40. Display System Value System value . . . . . : QASTLVL
Description : User assistance level
Assistance level : *BASIC *BASIC
*INTERMED
*ADVANCED
: QASTLVL - Help :
: :
: Assistance level. Specifies the level of assistance available to users :
: of the system. This system value is used to tailor the level of :
: displays available for users of the system. Displays intended for less :
: experienced users provide a higher level of assistance than do displays :
: intended for expert users :
: A change to this system value takes effect the next time a user signs :
: on. The shipped value is *BASIC :
: Bottom :
: F2=Extended help F3=Exit help F10=Move to top F12=Cancel :
: F13=Information Assistant F14=Print help :
: :
Press Enter to continue.
F3=Exit F12=Cancel

41. USER and the associated classes
Display User Profile - Basic
User profile : DB400A01
Previous sign-on :
Sign-on attempts not valid : 0
Status : *ENABLED
Date password last changed : 01/08/01
Password expiration interval : *SYSVAL
Set password to expired : *NO
User class : *PGMR
Special autho
Group profile : User Class - Help :
Owner : :
Group authori : The type of user. User class is one of the following: :
Group authori : o *PGMR - Programmer :
Supplemental : o *SECADM - Security administrator :
Assistance le : o *SECOFR - Security officer :
Current libra : o *SYSOPR - System operator
o *USER - User
Press Enter t : F2=Extended help F10=Move to top F12=Cancel :
: F13=Information Assistant F20=Enlarge F24=More keys :
F3=Exit F12 : :
(C) COPYRIGHT : :

42. DSPJOBD QBATCH First page of job attributes
Display Job Description
System: ODIN
Job description: QBATCH Library: QGPL
User profile : QPGMR
CL syntax check : *NOCHK
Hold on job queue : *NO
End severity : 30
Job date : *SYSVAL
Job switches :
Inquiry message reply : *RQD
Job priority (on job queue) : 5
Job queue : QBATCH
Library : QGPL
Output priority (on output queue) : 5
Printer device : *USRPRF
Output queue : *USRPRF
Library :
More...
Press Enter to continue.

43. Installing Client Access with Operations Navigator
from seneca home page
select ACS
select info center
select server related info
select AS400
select client access setup instructions
The instructions there might help you

44. Operations Navigator the GUI Interface

45. For Next Week Read Chapter 3 Do Review Questions for lecture 2
Be present AT and DO your LAB