System Security and UBEs - Need help!

[clewis]

I'm having problems submitting batch jobs to my AS400 from users who have
a system user as anything other than JDE.

Here's the system details:

OW: Xe Base
ES: AS400 820 with v4r5
CO: On AS400
Client: WinNT 4.0

I have turned on Security - JDE.INI file on the AS400 Enterprise server
has the following section (I'll be changing the JDE user password when
I've got things working properly):

[SECURITY]
DataSource=System - B7333 - DNT
User=JDE
Password=JDE
DefaultEnvironment=PD7333
SecurityServer=ENTSERVER
ServerPswdFile=TRUE
History=0


As well as the JDE user on the AS400, I have another AS400 user - lets
call it USER2 - and I've even gone so far as to give USER2 *ALLOBJ
authority.

One World user - OWUSER1 - has JDE as the system user, and can do
everything. Submit reports, run all applications, etc.

One World user - OWUSER2 - has USER2 as the system user, and can do
everything EXCEPT submit batch jobs (reports, etc) to run on the AS400.
The user gets the error message (for example): "An error occurred
submitting batch R00711, XJDE0001 to ENTSERVER" In the jde.log file on
the client are the following lines:

217/272 Mon Mar 12 09:17:36 2001 lanchube624
Submitting R007011, XJDEDOC1 to ENTSERVER (with Specs).

217/272 Mon Mar 12 09:17:38 2001 JDEKNUBE2741
KNT0000107 - Remote batch process could not be
submitted on ENTSERVER.


If I go into the Advanced settings for the batch job, and change the
location to run the report locally, then it works fine.

Any ideas?

Here are some more findings (don't know if they'll be useful or not!!):

1. If I submit the same job from an AS400 command line using RUNUBE, then
it works with both JDE and USER2 as the User Profile

2. The jobs that are failing create temporary password files in the
B7333SYS library.

3. The jobs that are failing do NOT create any records in the SVM7333/F9861
10 file (whereas jobs submitted by OWUSER1 that run fine do create records
in this file).

4. The failed submitted jobs don't even make it to the jobq.

I'm about five handfuls of hair balder than I was earlier. My wife would
appreciate it if I can get some help soon before I go completely bald.

Thanks!

Colin



<P ID="edit"><FONT SIZE=-1>Edited by clewis on 3/12/01 08:02 AM.</FONT></P>

 

[Blaine67]

Make sure all of your files are owned by JDE and ONEWORLD. Even down to the IFS
level. If a user/developer has changed something, it may have lost the correct
ownership. This may be a shot in the dark, but I hope it helps...............

BK






clewis <[email protected]> on 03/12/2001 09:48:16 AM

Please respond to [email protected]

To: [email protected]
cc: (bcc: BRIAN E. KAMPS/HOFFMAN/PENTAIR/US)
Subject: System Security and UBEs - Need help!



I'm having problems submitting batch jobs to my AS400 from users who have =
a system user as anything other than JDE.

Here's the system details:

OW: Xe Base
ES: AS400 820 with v4r5
CO: On AS400
Client: WinNT 4.0

I have turned on Security - JDE.INI file on the AS400 Enterprise server =
has the following section (I'll be changing the JDE user password when =
I've got things working properly):

[SECURITY] =20
DataSource=3DSystem - B7333 - DNT=20
User=3DJDE =20
Password=3DJDE =20
DefaultEnvironment=3DPD7333 =20
SecurityServer=3DENTSERVER =20
ServerPswdFile=3DTRUE =20
History=3D0 =20


As well as the JDE user on the AS400, I have another AS400 user - lets =
call it USER2 - and I've even gone so far as to give USER2 *ALLOBJ =
authority.

One World user - OWUSER1 - has JDE as the system user, and can do =
everything. Submit reports, run all applications, etc.

One World user - OWUSER2 - has USER2 as the system user, and can do =
everything EXCEPT submit batch jobs (reports, etc) to run on the AS400. =
The user gets the error message (for example): "An error occurred =
submitting batch R00711, XJDE0001 to ENTSERVER" In the jde.log file on =
the client are the following lines:

217/272 Mon Mar 12 09:17:36 2001 lanchube624
Submitting R007011, XJDEDOC1 to ENTSERVER (with Specs).

217/272 Mon Mar 12 09:17:38 2001 JDEKNUBE2741
KNT0000107 - Remote batch process could not be
submitted on ENTSERVER.


If I go into the Advanced settings for the batch job, and change the =
location to run the report locally, then it works fine.=20

Any ideas?

Here are some more findings (don't know if they'll be useful or not!!):

1. If I submit the same job from an AS400 command line using RUNUBE, then =
it works with both JDE and USER2 as the User Profile

2. The jobs that are failing create temporary password files in the =
B7333SYS library.

3. The jobs that are failing do NOT create any records in the SVM7333/F9861=
10 file (whereas jobs submitted by OWUSER1 that run fine do create records =
in this file).

4. The failed submitted jobs don't even make it to the jobq.

I'm about five handfuls of hair balder than I was earlier. My wife would =
appreciate it if I can get some help soon before I go completely bald.

Thanks!

Colin




--------------------------
To view this thread, visit the JDEList forum at:
http://198.144.193.139/cgi-bin/wwwthreads/showflat.pl?Cat=0&Board=OW&Number=7103
+ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +
This is the JDEList One World / XE Mailing List.
Archives and information on how to SUBSCRIBE, and
UNSUBSCRIBE can be found at http://www.JDELIST.com
+ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +

 

[got_to_love_jde]

Colin,
It would be helpful to have you include the client side jde.ini for security and debug. also, there must be people out there who can detail what is the most inclusive detail you can get from the debug and what the setting are to achieve that. i think it's very possible the messages are there on the client if you have the right settings.
also, have you checked the KG for for fixes ? based upon other comments in the forum i thought XE "base" was pretty full of problems. what ESU's have you applied ? the mother ?
wish i could be more help,
dave


NT 4.0 SP5, SQL 7.0, One World B7321 SP12.4, Citrix 1.8 (XE soon)

 

[Doug_Adamson]

We had similar issue when we did our XE install. We were installing foreign
language but this may still apply.

1. The user submitting the job needs to have the correct CCSID (Coded
Character set ID). We had to set CCSID to 935 (simplified Chinese, or for
English the setting is 65535). The CCSID is on the profile of the user.

2. The job description for the user OneWorld had to be changed so that
B733SYS came ahead of JDEOW in the library list.

Hope this helps.

Doug Adamson

AS/400 830 V4R5, Clients W2K.

 

[clewis]

I think I've figured out the problem. It looks like the System User profiles that you set up need to allow *PUBLIC to have some level of authority over them. Once I'd given *PUBLIC *FULL authority over my USER2 userprofile then I was able to submit batch jobs without them failing. I'm going to play with adjusting the level of authority required (reducing it from *FULL) but if anyone else was having a similar problem to me this should at least get them looking in the right direction.

Thanks to all who replied - the replies got me looking at authority levels on the AS400 which eventually led me to the solution.

Colin