Re: NFS security

I ran the following on two lpars:
crtusrprf robdel uid(123456)

When ROBDEL used EDTF on a new file in the mount then the new file was
created with ownership, etc of ROBDEL.
When ROB used EDTF on a new file in the mount then the new file was
created with ownership, etc of QNFSANON because ROB's uid does not match
between lpars.

I tried to change the UID on ROB but not only did I have to do a WRKUSRJOB
ROB *ACTIVE and kill those jobs but I also would have to do a WRKOBJLCK
ROB *USRPRF and kill all those jobs such as: QYPSJSVR, QZDASOINIT,
QZLSFILET, QZRCSRVS.
The link did acknowledge that a restricted state may be necessary.

This will solve the problem of requiring QNFSANON to have access. QNFSANON
having access opens up too much mount access.

What this does not solve is the authority for *PUBLIC, and any other user
profile listed in the directory containing these files.
Requiring our Domino developer to use some touch process to create the
files or whatever is an extremely onerous task to add to Domino agents,
past, present and future.

Rob Berendt