Wednesday, 17 October 2012

Pop quiz

If you are on an AS/400 and want to secure and directory or library from a particular user that has *ALLOBJ authority, can you do it?

….

You have a 50/50 chance on this one.

…

The correct answer - NO

http://publib.boulder.ibm.com/infocenter/iseries/v6r1m0/index.jsp?topic=/rzarl/rzarlallobjsa.htm
*ALLOBJ special authority
All-object (*ALLOBJ) special authority allows the user to access any resource on the system whether private authority exists for the user.
Even if the user has *EXCLUDE authority to an object, *ALLOBJ special authority still allows the user to access the object.
Risks: *ALLOBJ special authority gives the user extensive authority over all resources on the system. The user can view, change, or delete any object. The user can also grant to other users the authority to use objects.
A user with *ALLOBJ authority cannot directly perform operations that require another special authority. For example, *ALLOBJ special authority does not allow a user to create another user profile, because creating user profiles requires *SECADM special authority. However, a user with *ALLOBJ special authority can submit a batch job to run using a profile that has the needed special authority. Giving *ALLOBJ special authority essentially gives a user access to all functions on the system.

Let me know if you got that right!

iSeries work station definitions–prompting options

Want to default a particular login option for all users on your terminal server for client access and do not know how – well I do. A great start was found here, but alas the finish was not that great!

http://forums.citrix.com/thread.jspa?threadID=62545

They said to change the user id field in the .cae field, but this is not right.

You will have a .cae file for all of the .ws definitions that you have. You’ll want to modify the one that your users use.

[CAE]
UserIDSource=0
UserID=

It’ll look something like the above.

Note that the userIdSource is basically an array, with 0 being “Use windows username” and 3 being “User Kerberos”

Change the UserIdSource to be the array value that you want, – 2 in my case for prompt ever time

Seems to have done the trick.

Monday, 15 October 2012

Oracle–the complete solution

The complete oracle solution is a complete reality, and a strategic direction that is very appealing for the JDE centric organisations. Firstly, what do you need to run JDE?

Hardware
Storage
Virtualisation
Operating system
Database
Web Servers
Application
Management

How can oracle help with all of these requirements, it’s now fairly easy.

Hardware, as you know is going to be x86 or sprac, there are no limits to the performance and scalability that oracle can offer you in this area. Exadata and Exalogic will give you the ability to crush ANY processing requirements that you might have. Throw generic x86 processing at the problem, simple and cheap and able to run oracle standard edition. If you can afford enterprise edition database, then other engineered solutions, like an ODA, might suite your requirements.

Storage. Many of the engineered solutions have storage built into them, whether it’s ODA or exalogic or exadata. Bigdata is going to solve all of your big data problems. Oracle also have a range of SAN based technology to sort your larger storage requirements – the pillar axiom 600 could help you here.

Virtualisation is simple and Oracle Virtual Machine can create a highly available resilient solution for your enterprise. You can be fully supported and take advantage of machine templates from Oracle, so save time and money and force you down the path of best practice.

Operating Systems – look no further than Oracle Enterprise Linux. If you need a supported linux OS for your oracle requirements (or any requirements), look no further.

Database – one word – Oracle. More words, scalable, performance, reliability. It’s no longer a difficult or expensive database. Conceptually people think that it’s oracle and it’s difficult and expensive, we have clients that do not touch their x85 based oracle database for a year and it just runs… Enterprise Manager allows you to manage the database through a simple and graphical method.

Web Servers – WebLogic is the best web server available, it’s that simple. Template are easy. It’s fast and stable.

Application – JDEdwards

Management – This is like the icing on the cake. Everything I’ve mentioned can be managed with a single management solution. Raise cases, alert you if something is wrong. Manage your entire stack with a single management solution. The technology is simple, you just need to manage it!