MWIPROD user profile configuration

Products

• CA 2E

Issue/Introduction

How should user profile be configured for MWIPROD?

Environment

PTC Implementer 11.0 to 12.6

 

Cause

Getting 550 error when executing IBMi commands

Resolution

MWIPROD is a product administrator account

Adopts QSECOFR authority to access traditional objects

Needs *USE rights to commands

• CD
• CLRSAVF
• CRTSAVF
• CRTLIB
• DLTLIB

User profile configuration

• Status should always be *ENABLE
• Password = valid upper case password
• Limit capabilities = *NO
• Password expiration interval = *NOMAX
• Set password to expired = *NO
• User class = *PGMR
• Group profile = *NONE
• Initial program = *NONE
• Initial menu = *SIGNOFF
• Job description = QGPL/QDFTJOBD
• Special authority = *SAVSYS *SPLCTL *JOBCTL

If performing checkouts from remote

On host system for all users performing remote checkout functions

GRTOBJAUT OBJ(QSYS/<user profile>) OBJTYPE(*USRPRF) USER(MWIPROD) AUT(*USE)

By default, account is used as a communications user between host and receiver(s)

User name and password is maintained in data area IMCMNUSR in host and remote product libraries if on release earlier than 11.0

If on 11.0 or later, user name stored in IMCMNUSR, but password now encrypted and maintained by IUPDCMNUSR command

Account is used to initiate daemon jobs

Recommended for the user to be in Implementer.properties file when Implementer service is running on server other than IBMi