aopsetup shell script

The aopsetup shell script creates the /var/Printsrv directory if it does not already exist. If you specified a different directory in the base-directory attribute in the Infoprint Server configuration file (aopd.conf), aopsetup creates that directory instead of the /var/Printsrv directory.

aopsetup also sets the appropriate z/OS® UNIX permissions for these Infoprint Server directories and files:

• /var/Printsrv directory:

  This directory contains the Printer Inventory files and other Infoprint Server files. aopsetup sets permissions so that this directory is:

  • Owned by UID of 0
  • Readable and writeable by members of the AOPADMIN group and users with an effective UID of 0
  • Executable by everyone
• Files in the /usr/lpp/Printsrv/bin directory:

  This directory contains Infoprint Server executable files. aopsetup sets file permissions for these commands and processes:

  • Administrative commands: Sets permissions so that commands (such as pidu) are executable only by members of the RACF® group for Infoprint Server administrators (AOPADMIN) and users with an effective UID of 0.
  • Operator commands: Sets permissions so that commands (such as aopstart) are executable only by members of the RACF group for Infoprint Server operators (AOPOPER) and users with an effective UID of 0.
  • aopd: Sets the set-group-ID bit on.

  Tip: aopsetup does not set permissions for all files in this directory. Therefore, you cannot copy this directory to another system and use aopsetup to restore all the original permissions.

The aopsetup shell script requires two positional arguments:

aopsetup operator-group administrator-group

operator-group

The name of the RACF group you created for Infoprint Server operators. The suggested RACF group name is AOPOPER. However, you might have used a different name for this group. This argument is required.

administrator-group

The name of the RACF group you created for Infoprint Server administrators. The suggested RACF group name is AOPADMIN. However, you might have used a different name for this group. This argument is required.

Related information:

• Steps for setting up security
• Running aopsetup