QHA_AD_ANZCADPRF Policy

QHA_AD_ANZCADPRF specifies policies for use in conjunction with the ANZCADPRF command that enables PowerHA to determine if profiles have been inactive for the specified number of days within a PowerHA environment by utilizing distributed information across a cluster administrative domain.

Adding a QHA_AD_ANZPRF policy

Each QHA_AD_ANZCADPRF policy is uniquely defined by the administrative domain name specified in the domain name field. To add a QHA_AD_ANZCADPRF policy to an administrative domain supply:

There are two keywords with parameters for the value of this policy.  To use the policy, the policy value of INACTDAYS keyword must be supplied. Both policy values can be applied to an instance of the QHA_AD_ANZCADPRF.

The Policy values are:

• INACTDAYS
  This keyword contains a numeric value, from 1 to 366, indicating the number of days a user profile can be inactive before it is disabled. Upon execution of the ANZCADPRF command, profiles in nodes across the administrative domain will be disabled when they have been inactive for the specified number of days.

• OMITPRF
  Optionally, the policy value field can contain the OMITPRF keyword. The OMITPRF keyword can be used to specify a list of profiles that will never be considered inactive. It is recommended that you add to this list any profiles that have been created to own application objects and are not used to sign on. You will also want to add any other IBM (“Q”) profiles to this list that you do not want disabled. It is not necessary to add any of the profiles from the list of excluded profiles since they will never be considered inactive.

Restrictions

• All object (*ALLOBJ) and security administrator (*SECADM) special authorities are required to add or change this policy.

Examples

Example 1 - Disable profiles that have been inactive for 90 days

This policy instructs the ANZCADPRF command when run against the administrative domain ADMDMN to consider user profiles that have not been used for 90 days as inactive.

Example 2 - Ignoring Specified Profiles

This policy instructs the ANZCADPRF command when run against the administrative domain ADMDMN to consider user profiles that have not been used for 90 days as inactive. However, profiles MYAPP1 and MYAPP2 will never be considered inactive regardless of the number of days since the profile was last used.

Excluded Profiles

It is not necessary to add any of the profiles in the following list since they will never be considered inactive: