Profile Swapping

Profile Swapping allows you to assign an alternate or a "swapped" user profile to be interrogated by SafeNet/400 and passed to OS/400 for security lookups.

When profile swapping is in use, any incoming network transactions or jobs are assigned the alternate profile (the 'Swap to' profile) and passed as this alternate profile to OS/400. OS/400 then performs all security related checking as if the request came from the 'Swap to' profile and not the original profile. The job in OS/400 retains its original user name.

All authority checking by SafeNet/400 is performed using the original profile name.

Alternate Profile Swapping is controlled using the CHGSPCSET command (SafeNet/400 Menu SN2, Option 2). Set the SWAPU parameter to one of these values:

*NO

Do not swap profiles within SafeNet/400

*OPT

SafeNet/400 will swap profiles if the original user has an alternate swap profile set up in

SafeNet/400

*RQD

Requires that a swap profile must be set up for the original profile in SafeNet/400, or all requests are rejected.

 

SafeNet/400 Reference Guide

11.6

Copyright 2008 MP Associates of Westchester, Inc.

V8.50 - May 2008

 

Page 112
Image 112
IBM Safenet/400 manual Profile Swapping, Opt, SafeNet/400 RQD, 11.6