User JDE for AS/400 Installation

Hello, List!

I install OneWorld Xe on AS400 (with Central Objects on AS400) at the moment. When I validate installation plan Window appears with prompting login and password for access to System - B7333. I type QSECOFR. Then in documentation I find task "verifying CCSID settings for user JDE".
Should I create previously user JDE on AS400 or not? If yes then what parameters must has that system user?

Yes, JDE should be a user on the AS400;

User class . . . . . . . . . . . . . . . . : *SECOFR
Special authority . . . . . . . . . . . . : *ALLOBJ
*AUDIT
*IOSYSCFG
*JOBCTL
*SAVSYS
*SECADM
*SERVICE
*SPLCTL

Darrell Allison
Systems Programmer
AS/400 V4R5 9406-730 8-Way / OneWorld B7332 SP11.3

Re: RE: User JDE for AS/400 Installation

Thank you, Darrell.
Are these settings in AS400 installation guide or other documents?

RE: RE: User JDE for AS/400 Installation

These were settings recommended by consultants during our initial installation. I have not seen any documentation supporting or refuting these settings. But we have never had any problems with the user ID JDE. They seem to be excessively high in authority to me but I've never pursued it.

Darrell Allison
Systems Programmer
AS/400 V4R5 9406-730 8-Way / OneWorld B7332 SP11.3

Re: RE: User JDE for AS/400 Installation

Don't know if they are in the installation guide, but we were told this by our CNC specialist consultant that installed us.

Re: RE: User JDE for AS/400 Installation

Allison,

I would recommend NOT giving *IOSYSCFG, *SECADM, and *SERVICE.

Our JDE is setup as USRCLS *SECOFR, and special authorities of *ALLOBJ & JOBCTL.

I can think of no situation where *SERVICE authority is appropriate for JDE and very few where *IOSYSCFG is appropriate.

Tom Davidson
Global CNC
JohnsonDiversey

Re: RE: User JDE for AS/400 Installation

Our JDE is setup as USRCLS *SECOFR, and special authorities of *JOBCTL and *SAVSYS.

gm.

The JDE user profile on the AS/400 is really only used to own objects, so no special authorities need to be given to this profile. You can actually set it up in the *USER class with *NO special authorities. For OneWorld/World upgrades I usually do give this profile extra authority of *ALLOBJ, just so if I have problems, JDE can't tell me it's a security issue, but then I take this away after the upgrade.