DLTDSAPRF DELETE DISABLED PROFILE TAASEFU |
The Delete Disabled Profile tool provides a cleanup function to allow
disabled profiles to be deleted after N days. You must run a nightly
job that is entered into the job scheduler by the STRDSAPRF command.
Q name profiles and PWD(*NONE) profiles are never deleted. The
default provides a check of what the command would do.
The system does not keep track of the first date that a user profile
first became disabled. The tool requires that the STRDSAPRF command
be used to create a file in QGPL and schedule a nightly program be
run to determine the first date a user profile was disabled.
Using DLTDSAPRF
---------------
** An *ALLOBJ special authority user must enter the commands
described.
** Enter the command:
STRDSAPRF
This creates the DSAPRFP file in QGPL and sets up a job
scheduling entry for job UPDDSAPRF to be run at 15 minutes
after midnight on a nightly basis. If the system is not
powered on at that time, the job will run when the system is
IPLed. If multiple days have occurred before an IPL, only a
single UPDDSAPRF job will be run.
** You can run UPDDSAPRF yourself and then review the data in the
DSAPRFP file by entering the commands:
UPDDSAPRF
PRTDB2 FILE(QGPL/DSAPRFP)
Certain profiles are bypassed and not considered:
- Profiles beginning with Q
- Profiles that are in an *ENABLED state
- Profiles that are PWD(*NONE)
From the profiles that are processed, one record will be written to
the file for each user profile that is disabled. The date that the
profile was first determined to be in the 'disabled' state is shown
in both CYMD and job date format. The next time UPDDSAPRF is run, it
will delete any records where the user profile is now enabled or has
been deleted. Any user profiles that are disabled and are not in the
file will be added.
There is no harm in running the UPDDSAPRF command multiple
times per day.
** Periodically you may enter the DLTDSAPRF command to delete
those user profiles that have been disabled for at least the
number of days you specify. The default for the ACTION
parameter checks to see what would occur.
DLTDSAPRF DAYS(60)
A spooled file is output describing the results. Any user
profiles that were disabled for 60 days would be flagged as
'would be deleted'.
The listing will describe how much storage the user owns.
When ACTION(*DELETE) is specified and the user profile is to
be deleted, any any objects owned by the user are also
deleted. You may want to change the ownership of certain
objects before using ACTION(*DELETE).
It is normal for a user profile to own a message queue in QUSRSYS of
the same name as the profile. This takes about 12KB of storage.
These message queues are automatically deleted when a user profile is
deleted. The DLTDSAPRF listing will flag the amount of storage owned
if it exceeds 12KB so you can easily see those user profiles that own
more than just a message queue.
DLTDSAPRF escape messages you can monitor for
---------------------------------------------
TAA9891 Unable to delete one or more profiles.
Escape messages from based on functions will be re-sent.
STRDSAPRF Command *CMD
-----------------
CRTFILE A *YES/*NO values for whether to create the DSAPRFP
file in QGPL. *YES is the default to create the
file.
*NO may be specified if the file already exists and
you want to bypass the create step.
UPDDSAPRF Command *CMD
-----------------
No parameters exist.
DLTDSAPRF Command *CMD
-----------------
DAYS The number of days to retain disabled user profiles
for. It must be a value between 1 and 5000.
ACTION The type of action to be performed. A listing is
produced.
*CHECK is the default to output a listing describing
what the command would do.
*DELETE may be specified to delete any disabled user
profiles and their owned objects based on the DAYS
value.
Restrictions
------------
An *ALLOBJ user must enter the commands.
Prerequisites
-------------
The following TAA Tools must be on your system:
ADDDAT Add date
CHGOBJD2 Change object description 2
CHKALLOBJ Check *ALLOBJ user
EDTVAR Edit variable
RSNLSTMSG Resend last message
RTVDAT Retrieve date
RTVJOBSCDE Retrieve job schedule entry
RTVPWDSTS Retrieve password status
SNDCOMPMSG Send completion message
SNDESCMSG Send escape message
SNDSTSMSG Send status message
Implementation
--------------
You must first use STRDSAPRF.
Objects used by the tool
------------------------
Object Type Attribute Src member Src file
------ ---- --------- ---------- ----------
STRDSAPRF *CMD TAASEFU QATTCMD
UPDDSAPRF *CMD TAASEFU2 QATTCMD
DLTDSAPRF *CMD TAASEFU3 QATTCMD
TAASEFUC *PGM CLP TAASEFUC QATTCL
TAASEFUC2 *PGM CLP TAASEFUC2 QATTCL
TAASEFUC3 *PGM CLP TAASEFUC3 QATTCL
TAASEFUR2 *PGM RPG TAASEFUR2 QATTRPG
TAASEFUR3 *PGM RPG TAASEFUR3 QATTRPG
TAASEFUP *FILE PF TAASEFUP QATTDDS
TAASEFUQ *FILE PF TAASEFUQ QATTDDS
Structure
---------
STRDSAPRF Cmd
TAASEFUC CL pgm
UPDDSAPRF Cmd
TAASEFUC2 CL pgm
TAASEFUR2 RPG pgm
DLTDSAPRF Cmd
TAASEFUC3 CL pgm
TAASEFUR3 RPG Pgm
|
Added to TAA Productivity tools July 15, 2003