[Top] [Prev] [Next] [Bottom]

3. Configuration for BEA TUXEDO System Administration

Creating a Profile for a BEA TUXEDO Administrative Group

To set the group ID correctly for members of an administrative group, you must set up a group profile. A group profile is the same as a user profile except that the group ID number is set to a numeric value. Each user's profile can then refer (in the group profile field) to the group profile name.

For example, consider the user and group profiles for an administrator named Joe with a login ID of joe:

In the user profile for user joe:
- The group profile field (GRPPRF) is set to tuxadm.
- The user ID number (UID) field is set to 6494.
In the group profile for group tuxadm, the group ID number (GID) is set to 601.

If user joe runs the id utility as follows.
```
call id
```
then the following output is displayed on the screen.
```
uid = 6494, euid = 6494, gid = 601, egid = 601
```
User profiles and group profiles can be set up with the CRTUSRPRF command.

Granting Special Authority

The user profile for an administrator must include *JOBCTL special authority. This special authorization allows the BEA TUXEDO system to bypass some security checks when it is trying to verify the state of the following:

System processes within the BEA TUXEDO system, and
Clients being run under a user profile other than that of the administrator.

Without this authorization, the BEA TUXEDO system fails to do the following:

Restart servers and
Clean up after clients should they fail to detach from an application when they exit or when they end unexpectedly.

You can add this authorization to your user profile by adding *JOBCTL to the Special Authority (SPCAUT) list. To do so, complete the following tasks:

Sign on as QSECOFR.
Run the chgusrprf command.

Setting the Correct Time Offset

In order for the Web GUI administration tool to work properly, the system variable QUTCOFFSET must be properly set. Use the wrksysval command to specify the offset (in hours and minutes) between the current system time and the Coordinated Universal Time (UTC), also known as Greenwich mean time. For example, in the Eastern Standard Time time zone, QUTCOFFSET should be set to +4 hours.