PPM archived or deleted profiles after saving the AS400 system and restoring to another system. (NETIQKB36418)

  • 7736418
  • 02-Feb-2007
  • 02-Oct-2008

Environment

VigilEnt Security Agent for iSeries 7.5

VigilEnt Security Agent for PSSecure 7.5

Profile and Password Management (PPM)

NetIQ Security Solutions for iSeries 8.0

PSSecure 8.0 Profile & Password Management

Situation

PPM archived or deleted profiles after saving the AS400 system and restoring to another system.

When saving User Profiles on the source system, the 'Last Used' date for the profile is not preserved to be restored on the target machine.

Resolution

To avoid this situation, the PPM 'Method for determining eligible profiles' should be changed from *DEFAULT to *PRVACTDT prior to allowing the PPM UPM job to run.  This job is scheduled under the job name PSPROFILE and is often scheduled to run on Sunday nights.  From the PPM Menu, perform the following: 

  1. Select Option 1General Options Menu, then press Enter.
  2. Select Option 16 Change Defaults (DISABLE DELETE +), then press Enter.
  3. Change the value for 'Method for determining eligible profiles' to *PRVACTDT, then press Enter.  It will be possible to change it back to *DEFAULT once the profiles have been signed on, populating the 'Last Used' date once again.

Cause

PPM 'Method for determining eligible profiles' default value is set to *DEFAULT.

Additional Information

Formerly known as NETIQKB36418

Definitions for 'Method for determining eligible profiles' values:

  • *DEFAULT
    To calculate profile inactivity, *DEFAULT uses the System date to age the user profiles against the Last Used Date of the user profile object. If the Last Used Date of the user profile object is blank, it will look at the creation date.

  • *PRVACTDT
    Uses the greater of the following dates:
    • User Profile Previous Sign-on Date
    • User Profile Date Password Last Changed
    • Object Description's Last Used Date
    • Object Description's Creation Date