Setting jde.ini File Security

Caution: Implementing JDE.INI file security will prevent Server Manager from modifying configuration settings.

To set JDE.INI file security:

  1. Enter this command:

    cd $JDE_BASE
    
    chmod 600 JDE.INI
    

    This command sets maximum security for the JDE.INI file. The JDE_BASE environment variable is set to the directory that contains the JDE.INI file.

    Note: The file name is case-sensitive.

    The security for the JDE.INI file should look similar to this:

    -rw------- jde910 jde910 JDE.INI
    

    Denying write access to the user jde910 is not strictly necessary, but can prevent accidental modification of JDE.INI settings, which could adversely affect the operation of JD Edwards EnterpriseOne.

  2. If you want to deny the user write access, enter this command:

    chmod 400 JDE.INI
    

    Because it is important to keep access to the JDE.INI file as secure as possible, you should also limit the amount of access to the user jde910 (or the user account that starts and stops JD Edwards EnterpriseOne) to a minimum. Users with access to this account might obtain the user names and passwords in the F98OWSEC table, and, thus, gain privileged access to the database.

Note: Denying write access may prevent Server Manager from being able to change the configuration items within the JDE.INI file.