object copy

Recursively copy the policy from one protected object space to another. The policy that is copied includes ACLs, POPs, authorization rules, and extended attributes.

Requires authentication (administrator ID and password) to use this command.

Both source and destination objects must exist under an object space.

The recursive copy occurs in the background and the command will immediately return. Only one copy operation occurs at a time. So extra copy operations are queued until the copy operation that preceded it is completed.

A message is logged in the policy server's log file when the copy operation starts and when it completes. The completion message also indicates whether the copy operation is a success or failure.

Syntax

object copy -recursive src_object_name dst_object_name

Options

src_object_name
The source object name. Specifies the protected object, which is the fully qualified name of the object, including the object space within which it is located. The src_object_name and all its child objects are copied to the dst_object_name including ACLs, POPs, authorization rules, and extended attributes that are attached to them.

An example object name is: /WebSEAL/abc.ibm.com-default

dst_object_name
The destination object name. Specifies the protected object, which is the fully qualified name of the object, including the object space within which it is located. The src_object_name and all its child objects are copied to the dst_object_name including ACLs, POPs, authorization rules, and extended attributes that are attached to them.

An example object name is: /WebSEAL/new.ibm.com-default

Return codes

0
The command completed successfully.
1
The command failed. When a command fails, the pdadmin command provides a description of the error and an error status code in hexadecimal format (for example, 0x14c012f2). See "Error messages" in the IBM Knowledge Center. This reference provides a list of the Verify Identity Access error messages by decimal or hexadecimal codes.

Examples

The following example performs a recursive copy of the contents of the /WebSEAL/abc.ibm.com-default object to the /WebSEAL/new.ibm.com-default object.


pdadmin sec_master> object copy -recursive /WebSEAL/abc.ibm.com-default 
/WebSEAL/new.ibm.com-default