Activating the SAF Command Authorization
Activate command security defined in the NETCMDS class in your
SAF product by entering:
REFRESH CMDAUTH=SAF,BACKTBL=SECTABLE
In this example, a NetView® command authorization table named SECTABLE is used to protect immediate commands, and to backup the SAF product.
When you are certain that you do not want to use the NetView command authorization
table as the primary type of command security, add the following statement
to the CNMSTUSR or CxxSTGEN member:
SECOPTS.CMDAUTH = SAF.sec_table
To check your command authorization settings, use the NetView LIST SECOPTS commands
to display the messages indicating that you are using an SAF product
with a backup NetView command
authorization table as shown in the following example:
NetView V5R2 - 7E Tivoli NetView NTV7E TOM 06/07/06 18:27:41
* NTV7E list secopts
' NTV7E
BNH228I OPTION VALUE LAST UPDATED UPDATE ID
BNH229I ------- -------- ----------------- --------------
BNH229I OPERSEC NETVPW 06/07/06 09:59:30 INITIALIZATION
BNH229I OPSPAN SAF 06/07/06 09:59:30 OPER1
BNH229I CMDAUTH SAF 06/07/06 09:59:30 OPER1
BNH229I BACKTBL CNMSCAT2 06/07/06 09:59:30 INITIALIZATION
BNH229I AUTHCHK SOURCEID 06/07/06 09:59:30 INITIALIZATION
BNH229I SPANAUTH NONE 06/07/06 09:59:07 INITIALIZATION
BNH229I SPANCHK SOURCEID 06/07/06 09:59:30 INITIALIZATION
BNH229I CATAUDIT NONE 06/07/06 09:59:07 INITIALIZATION
BNH229I AUTOSEC BYPASS 06/07/06 09:59:34 INITIALIZATION
BNH229I SURROGAT NO 06/07/06 09:59:30 INITIALIZATION
BNH229I RMTSEC NONE 06/07/06 09:59:40 INITIALIZATION
BNH229I RMTAUTH SENDER 06/07/06 09:59:30 INITIALIZATION
BNH229I WEBAUTH PASS 06/07/06 09:59:30 INITIALIZATION
BNH230I END OF LIST SECOPTS INFORMATION
------------------------------------------------------------------------------
After successfully completing these steps, the command authorization in an SAF product provides function equivalent to the NetView command authorization table in the NetView product.