TAA Tools

The Delete Disabled Profile  tool provides a cleanup function  to allow
disabled profiles to  be deleted after N days.   You must run a nightly
job  that is entered  into the job scheduler  by the STRDSAPRF command.
Q  name profiles  and  PWD(*NONE)  profiles  are never  deleted.    The
default provides a check of what the command would do.

The system  does not keep track of  the first date that  a user profile
first  became disabled.   The tool requires that  the STRDSAPRF command
be used to  create a  file in QGPL  and schedule a  nightly program  be
run to determine the first date a user profile was disabled.


  **   An  *ALLOBJ  special  authority  user must  enter  the  commands

  **   Enter the command:


       This  creates  the  DSAPRFP  file in  QGPL  and  sets  up a  job
       scheduling entry  for job  UPDDSAPRF  to be  run at  15  minutes
       after  midnight on  a  nightly  basis.   If  the system  is  not
       powered on  at that time,  the job will  run when the  system is
       IPLed.   If  multiple days have  occurred before an  IPL, only a
       single UPDDSAPRF job will be run.

  **   You can run UPDDSAPRF  yourself and then review the data  in the
       DSAPRFP file by entering the commands:

             PRTDB2       FILE(QGPL/DSAPRFP)

Certain profiles are bypassed and not considered:

          - Profiles beginning with Q
          - Profiles that are in an *ENABLED state
          - Profiles that are PWD(*NONE)

From the  profiles that  are processed, one  record will be  written to
the  file for each  user profile that  is disabled.  The  date that the
profile was first  determined to be  in the 'disabled'  state is  shown
in both CYMD and  job date format.  The next time  UPDDSAPRF is run, it
will delete  any records where the  user profile is now  enabled or has
been deleted.  Any user profiles that  are disabled and are not in  the
file will be added.

       There  is no  harm  in running  the  UPDDSAPRF command  multiple
       times per day.

  **   Periodically  you  may enter  the  DLTDSAPRF  command to  delete
       those  user profiles  that have been  disabled for  at least the
       number  of  days you  specify.    The  default  for  the  ACTION
       parameter checks to see what would occur.

             DLTDSAPRF    DAYS(60)

       A  spooled file  is output  describing  the results.   Any  user
       profiles  that were  disabled for  60 days  would be  flagged as
       'would be deleted'.

       The listing  will  describe  how  much storage  the  user  owns.
       When ACTION(*DELETE)  is specified  and the  user profile  is to
       be  deleted,  any  any  objects  owned  by  the  user  are  also
       deleted.   You  may want  to  change the  ownership  of  certain
       objects before using ACTION(*DELETE).

It is normal  for a user profile to  own a message queue in  QUSRSYS of
the  same name  as the  profile.   This  takes about  12KB  of storage.
These  message queues are automatically deleted  when a user profile is
deleted.  The DLTDSAPRF  listing will flag the amount of  storage owned
if it exceeds  12KB so you can easily see those  user profiles that own
more than just a message queue.

DLTDSAPRF escape messages you can monitor for

      TAA9891    Unable to delete one or more profiles.

Escape messages from based on functions will be re-sent.

STRDSAPRF Command                                    *CMD

   CRTFILE       A  *YES/*NO values for  whether to  create the DSAPRFP
                 file in  QGPL.   *YES  is the  default to  create  the

                 *NO may  be specified if  the file already  exists and
                 you want to bypass the create step.

UPDDSAPRF Command                                    *CMD

No parameters exist.

DLTDSAPRF Command                                    *CMD

   DAYS          The  number of days  to retain  disabled user profiles
                 for.  It must be a value between 1 and 5000.

   ACTION        The type  of action  to be  performed.   A listing  is

                 *CHECK is the  default to output a  listing describing
                 what the command would do.

                 *DELETE may  be specified to delete  any disabled user
                 profiles  and their  owned objects  based on  the DAYS


An *ALLOBJ user must enter the commands.


The following TAA Tools must be on your system:

     ADDDAT          Add date
     CHGOBJD2        Change object description 2
     CHKALLOBJ       Check *ALLOBJ user
     EDTVAR          Edit variable
     RSNLSTMSG       Resend last message
     RTVDAT          Retrieve date
     RTVJOBSCDE      Retrieve job schedule entry
     RTVPWDSTS       Retrieve password status
     SNDCOMPMSG      Send completion message
     SNDESCMSG       Send escape message
     SNDSTSMSG       Send status message


You must first use STRDSAPRF.

Objects used by the tool

   Object        Type    Attribute      Src member    Src file
   ------        ----    ---------      ----------    ----------

   STRDSAPRF     *CMD                   TAASEFU       QATTCMD
   UPDDSAPRF     *CMD                   TAASEFU2      QATTCMD
   DLTDSAPRF     *CMD                   TAASEFU3      QATTCMD
   TAASEFUC      *PGM       CLP         TAASEFUC      QATTCL
   TAASEFUC2     *PGM       CLP         TAASEFUC2     QATTCL
   TAASEFUC3     *PGM       CLP         TAASEFUC3     QATTCL
   TAASEFUR2     *PGM       RPG         TAASEFUR2     QATTRPG
   TAASEFUR3     *PGM       RPG         TAASEFUR3     QATTRPG
   TAASEFUP      *FILE      PF          TAASEFUP      QATTDDS
   TAASEFUQ      *FILE      PF          TAASEFUQ      QATTDDS


   TAASEFUC   CL pgm

   TAASEFUC2  CL pgm
     TAASEFUR2  RPG pgm

   TAASEFUC3   CL pgm
     TAASEFUR3   RPG Pgm

Added to TAA Productivity tools July 15, 2003

Home Page Up to Top