object create
Creates a protected object.
Authentication (administrator ID and password) required to use this command.
Syntax
object create object_name object_description type ispolicyattachable {yes|no}
Options
object_description- Specifies any text string that describes the object that is being
created.
A valid description is an alphanumeric string that is not case-sensitive. String values are expected to be characters that are part of the local code set. If the description contains a space, ensure that you enclose the description in double quotation marks. You can specify an empty string ("") to clear an existing description.
An example of a description is
"Travel Groups". ispolicyattachable{yes|no}- Specifies whether an ACL, a protected object policy, or an authorization
rule can be attached to this object. Valid values are
yesorno. object_name- Specifies the name for the protected object that is being created.
This name is the fully qualified name of the object, including the
object space within which it is located. This name must be unique.
A valid object name is an alphanumeric string that is not case-sensitive. String values are expected to be characters that are part of the local code set.
Examples of object names are:
/Management/Groups/Travel/WebSEAL/Management
type- Specifies the type of object to be created. Types range from 0
to 17. For example, types
10or16are appropriate for container objects. Object types are described in the Administering topics in the IBM Knowledge Center.You can assign any of the following types:- 0
- Unknown
- 1
- Secure domain
- 2
- File
- 3
- Executable program
- 4
- Directory
- 5
- Junction
- 6
- WebSEAL server
- 7
- Unused
- 8
- Unused
- 9
- HTTP server
- 10
- Nonexistent object
- 11
- Container object
- 12
- Leaf object
- 13
- Port
- 14
- Application container object
- 15
- Application leaf object
- 16
- Management object
- 17
- Unused
Return codes
- 0
- The command completed successfully.
- 1
- The command failed. When a command fails, the pdadmin command
provides a description of the error and an error status code in hexadecimal
format (for example,
0x14c012f2). See "Error messages" in the IBM Knowledge Center. This reference provides a list of the Security Verify Access error messages by decimal or hexadecimal codes.
Examples
- The following example creates the object named
/Management/test-objectthat has a description ofTest Objectand is an application container object (14). An ACL or a protected object policy can be attached to this object:pdadmin sec_master> object create /Management/test-object "Test Object" 14 ispolicyattachable yes - The following example creates the object named
/Management/Groups/Travelthat has a description ofTravel Container Objectand is an application container object (14). An ACL or a protected object policy cannot be attached to this object:pdadmin sec_master> object create /Management/Groups/Travel "Travel Container Object" 14 ispolicyattachable no