Changes in PCSACC/400 V4R1M0 as from january, 20th. 2006
Please use the below shown Drop-Down Menue.
back to topThe interfaces of all programs have been refreshed, in order to provide significantly more ease of use.
Hidden functions no longer exist.
Some functions have been transferred from the user screen into the entry menu.
The previous application menu now is the entry menu. This display can always be called, even if test periods are expired or licences are missing.
User *SECOFR will always be able to call maintenance of documentation, interface programs as well as display and entry of licence codes if required.
Additional system informations will also be displayed.
If a test period has expired, no exit program will block any longer. Only once a day, an error message will be sent to QSYSOPR.
Documentation now provides a link to all informations on the home page.
The user screen now only contains 2 pages with options, on the 2. page only options for maintenance of log data are being provided.
Instead of the home page, now user properties are being created for administration and controlling with additional functions.
All screens now have a unique marking for preparation of a grafical interface.
File PCSECL has been split into single logical files. Some additional logical files allow new display sequences.
The delete display function has been separated. On the display, records can be omitted from deletion subsequently (Bypass function).
For
users, even parts of the stored data e.g. DB, IFS or CMD
can be selected for deletion. The user record then still exists.
Certain users are excluded from deletion (QSECOFR,
QPCS, active
group records).
The copy display function has been separated. All copy displays now are being provided via a subfile.
Bypass and selective copy for users is possible. An intelligent routine tries to complement missing new keys.
When copying, authorities will be cumulated for an existing target record.
The logic is identical to conversion via option S.
Copying now also is always performed via subfile. An intelligent control routine tries to find out what could have been entered into missing fields.
Authorities for existing target records will now no longer be ignored , but cumulated, similar as for conversion of log data.
All
user oriented maintenance programs have been split into modules.
Thus, the display files also have been split.
Program
calls now perform better.
All changed programs have been converted to ILE RPG. For maintenance
programs, now service Program SRVCHG
exists.
QPCS now is production library.
For display of all database files, all libraries, all objects of a library
and all file members of a file, the screens, colouring and options have
completely be redesigned.
Now, working with wildcard is possible. Copy and delete can be selected
via F6 = Mark all displayed records.
When showing OS/400 objects, only data not yet stored will be displayed.
The program name of the creation program will be stored at all user records upon creation.
Fields for creation of new directories on Root = / and QDLS = /QDLS level have been shifted from user record into these records.
To delete a directory on this level, a record within PCSACC/400 is required.
Up to now, controlling of ROOT and
QDLS accesses has always be performed,
now only with value 2.
New fields for OPEN for READ accesses, EXTRACT accesses and existence authorities are provided.
With application authority, now it is possible to differentiate between Netserver, FTP Server, FTP Client, TFTP Server and DOS 640 K accesses.
This
allows access to a directory on the Netserver, but not via FTP or vice
versa.
A new system value allows to inhibit accesses to /QSYS.LIB via Netserver for all users.
Another new system value allows an update function without having a user to be registered within PCSACC/400.
Further system values control allocation of application authorities during conversion of log data into access authorities.
Anonymous access can generally be prohibited.
A new record type now classifies users into
User
*USER
Administrator *ADMIN
Controller *CONTR
Groups *GROUP
Anonymous- *ANONY
Crossover records *CROSS
Customer templates *TEMPL
(As example for group activation, for activation, deactivation)
PCSACC/400 templates *PCSACC
(QDEFAULT, QDEFADD,
QDEFACT and QDEFINACT)
A user can no longer be e.g. administrator and concurrently group.
Adjustment will be performed during installation of V4R1.
The previous fields Change class and Change Authority no longer exist.
Only Users, Crossover, Anonymous , inactive groups, User templates, Administrator and Controller can be deleted.
Users QSECOFR and QPCS are exempted from deletion.
The record types to be displayed can be selected via option F5.
Example data can be deleted and re-installed. All programs provide a hint to the Example data. This display can be deselected.
The menu for quick maintenance now contains 3 pages. With *ALL or generic names, the record types to be changed can be selected.
This is allowed for all users with user profile and customer templates.
Up to 5 group profiles are being supported, where the user may be a group.
This
allows to better control performance.From the user display, the group
field has been reduced from 10 to
1 Byte.
A new option allows to display all 5
groups. When displaying all members of a group, the group will be displayed
first.
On the user maintenance, all possible fields will be displayed according
to the record type.
For one record only, these are practically none.
For
entry of groups, extensive error checking and entry help will be performed.
This is true for user maintenance and all displays that allow entry of a group.
A new copy function considerably eases consolidation of groups. Via an option, now all user data or a selection can be transferred to a group.
Concurrently, the user record will be changed.
The 4 pages of the user records have been extended to 5 pages.
Function *VPRT no longer exists. New fields exist on user- and library level for ShowCase accesses, DDM data queues and data areas.
For logging of IFS records, now completely independent fields exist for EXTRACT accesses and all other IFS accesses.
Logging of EXTRACT accesses is being controlled by a new field.
Still open is a group maintenance similar to calender maintenance to reassign users from one group to another.
Maintenance
of groups
An additional maintenace program allows to transfer all users of a group
to another.
Also, a group including all authority data and members may be renamed.
Printing of user overview - PRTUSR
Printout now contains informations IP,
CMD, IFS
and DB if data authorities exist,
as well as values for T and V
(test mode and automatic conversion).
New options allow printing of all users that are specified in test mode. Additionally, it is now possible to print users with errors in group assignments.
Display
user
On this screen it is also possible to select users with errors in group
assignments.
All unique options will be displayed in blue.
Activation/deactivation
of exit programs
Program PCSNETA
Support of OS/400 release V5R4 was added.
Changes in PCSACC/400 V4R1M1 as from January, 23th. 2006
Programs GETUSRTXT and CVTPCSLOG turned to levelcheck error.
Program OBJPCS retrieve of member information
The input of a non existing library or file applied a Program abort.
Program CHGUSR - Fields MSGQ and MSGLIB (on 4th site) for record type *PCSACC were blocked.
The record type has been modified after F4=Prompt or browsing,
In SQL/ODBC exit Program PCSSQ2 SET SCHEMA XYZLIB instructions are supported,
all other SET-instructions have been checked and rejected.
Changes in PCSACC/400 V4R1M0 as from February, 9th. 2006
Program CLRPCSLOG has run to a levelcheck error.
Progam DSPUSER
Display and selection of blocked users
will no longer take place for record type *GROUP, *ANONY
and *CROSS.
Program PCSSQ2
Token error e.g. SELECT now() will
no longer be automatically rejected.
A new system value manages the desired action.
Invalid Select instructions will no longer be performed by i5/OS (OS/400).
Changes in PCSACC/400 V4R1M0 as from March, 2th. 2006
This exit Program will be respond via file transfer with e.g. reflection.
If the user has LMTCPB(*YES) in OS/400, an OS/400 error leads to an abort of this Program.
This error will be avoided by a Program modification.
Module CHKUSRDTA has been adapted to USROPN.
Now the Program LOGPCS will not run to an error any longer, if conversion takes place in batch-mode.
Library QPCS is taken up in system value QUSRLIBL.
Progam CHGPCS print menue MENUPRT
Programs PRTPCS and PRTSPC
have been transfered to batch-mode inaccurate.
Program PRTUSR hasn´t
run in batch-mode.
Error inviroment for Program PRTUSR: library QPCS will be added to system values QUSRLIBL.
Program CHGDEF - Setting of default
values
During installation the default directory of user QDEFAULT will
be deleted.
New records will be created only if the directories really exist on system.
New default value for conversion of root accesses at user QDEFADD.
Program CHGVAL -system values
With button F8=
Reset, all fields in the display can be resetted to default
values,
a changing of fields takes place with F10= Update only.
During installation incorrect system values will be initialized with default values.
Exit-program PCSIFS
New bypass function for update, for
creating no new users records, hasn´t worked correctly.
Program LOGPCS conversion of log
data into access authorization
Log files from file transfer e.g. Reflection will now be converted correctly
with support of library #BLANK.
Log files from netserver accesses with EXTRACT-Accesses haven´t been converted correctly.
Changes in PCSACC/400 V4R1M0 as from March, 18th. 2006
Command CPYUSR has got a new parameter called ACTION.
Value *NONE suits the present version.
Value *COPY: all additional data will be copied.
Value *MOVE: additionaly to parameter *copy the FROMUSR will be deleated.
Both parameters are designed to be used of a Program, to provide whole files with a new user name.
Changes in PCSACC/400 V4R1M0 as from May, 4th. 2006
Button F6
was not replaced with button F9 in
several maintenance programs.
IFS-accesses
Generic access can be used on level /QDLS now.
There are new default values to allow
accesses by Windows Netserver or TCP/IP FTP with different
default values .
Program CHGFIL
File-Id hasn´t been transfered automatically with an update.
A couple of display errors in user and command maintenance have been corrected.
Storage of groups hasn´t always been directly executed correctly.
Changes in PCSACC/400 V4R1M1 as from January, 3th. 2007
Maintenance periods
With this release you´ll need a new license code. If you have a permanent license key per 2006/12/22, a new license key (with maintenace ending at 2007/03/31) will automatically be stored in library QPCS.
With payment of the current maintenance invoice you'll automatically get a new license key for another 12 months via email.
With cut and paste you can copy and execute the new command ADDPCSKEY into a new command screen.
This period will be shown in the header of CHGPCS.
The period will be shown in green if it is located in the next calendar year.
If the period is located in the same
year and the appointed time hasn´t been transgressed,
it will be shown in blue. This is an indicator which shows that the actual maintenance invoice still has to be paid.
If the maintenance period is transgressed,
the period will be shown in white.
You are working in restricted mode
then. Many comfortable functions are now logged:
All data can still be maintained but
there is a lot more effort to do manually now.
If the period is shown in red, the
maintenance year is transgressed.
Maintenance program CHGPCS can´t be used any longer. Data maintenance can be done via DFU only.
The license is expired then.
There is no exit program checking for an end of the maintenance period.
Advanced IP Adress control
Starting with OS/400 V5R2 IP adress control is now possible for DDM and for all
Hostserver (SQL/ODBC; Netserver, remote command/iSeries Navigator and Dataqueues).
Thereby working with a weekly calendar is possible too.
The ip adress is viewable in log records.
Possible options for the control fields are 1=no control or 2=Control.
Option 0 is no longer available.
New exit program for FTP server accesses
starting with OS/400 V4R4
The exit program PCSLO2 allows controlling
of start modes.
Either QSYS.LIB with a current library or the IFS mode with a home directory
In OS/400 you have to go for one function using command CHGFTPA.
Then you have to switch in your FTP
Session. This can lead to problems if default mode is QSYS.LIB
and you want to access IFS
with a freeware FTP Tool for the PC.
The third page of user maintenance
had to be reorganized and new fields were added for
these two new functions. Considering
to these functions there are radio buttons that allow
you to retrieve information out of
the users profil or IFS.
5250-Emulation
If there is a 5250 emulation in use, that doesn´t
support radio buttons, like e.g. MOCHA,
you can activate an alternative function
using the user properties.
There will be a 0 displayed now, instead of the radio button,
by entering 1
the button functionality will be released.
Installation
Second time installation process will
be canceled if the libraries
QPCSO, QPCSO2924, QPCSO2929
and/or QPCSO2939 are still existing.
Up to now these libraries were deleted
automatically.
If there is an installation abort,
forced by a user and the installation process is not repeated correctly, this can lead to a loss of all data.
We suggest to delete these libraries, before starting second time installation.
Already stored data was displayed
in Program OBJPCS partly.
Although it wasn´t existing
in record type, the bypass character was displayed in IFS maintenance
Program DSPIFS.
The area that contains the system information in maintenance program CHGPCS had been rearranged.
Furthermore a disply of exit programs had been added.
If there are nor exit programs in
active mode this value will be shown in red.
Programs PCSSQ2 and PCSCMD
If your are using CALLS with library *LIBL, like e.g. *LIBL/HUGO,
the correct library will now be identified, like it is already in use when your
working with files.
All maintenace programs
When it should´nt be treated
like F12, according to user proberties
of the administrator,
Button F03 hasn´t always caused an abort immediately.
Now there is always a return to CHGPCS
menu.
Sample datas were partly incorrect.
System values
Jobqueue and outqueue can now be prompted
with F4.
There is a new system value which allows to automatically correct a user record with own access rights.
NOTE: This works only, if the user is member of other groups.
If all own access rights will be removed, the user name will be removed out of the groups automatically.
Therewith both ways will now be corrected automatically.
Copy
Ip adress records couldn´t be copied between the record types *CROSS = crossover
user.
Program PRTUSR
Limit declaration didn´t work.
Telnet
Display of active units via radio button didn´t work.
User maintenance program DSPUSR
Using F5=update, incorrect group/user
records can be displayed. This worked correctly partly.
Convert protocoll data into access
rights out of user dispaly with S+F17
The to-user can be changed now, therwith data can be consolidated to a
group.
Group maintenance
At the selection of groups in the user dispaly, up to 5
groups can now be chosen at the same time.
Reorganisation
There was a link to file PCSECL, which doesn´t exist anymore,
in program RGZPCS.
Changes in PCSACC/400 V4R1M1 as from February, 7th. 2007
Programm OBJPCS get user profile and file information
Program occurs a parameter error after Add new user records.
Program move into a loop after Add of file records.
This fix is also as save file via email available.
Program PCSNETA
Option 2 and function key F3 moves to decimal error.
This fix is also as save file via email available.
Copy of user data and database objects
Key F6 is now displayed in red. Additonal informations were added to the help text.
Systemvalues
New system values allows controlling of sending messages for rejected TCP/IP FTP logins.
Systemvalues and user maintenance
All message queues can now be selected from libraries with function key F4. Field values are
now checked. If user names or message queues not exist, error messages are displayed.
Second time installation
At the beginning of the installation locks on member QPCS/PCUSER(PCUSER) are
checked. Installation will be canceled, if this occur.
To avoid CPYF problems, new program PCSINSTOPN was called.
If not all CPYF commands are successfully executed, you can repeat this process as often as
you need to call the program
CALL QPCS/PCSINST3 ‘PCSACC’
If CPYF of protocoll data takes too much time, the installation process can be canceled.
Now protocoll Data in library QPCSO can be removed with commands
CLRPFM FILE(QPCSO/PCOUT)
CLRPFM FILE(QPCSO/PCOUT2)
Installation can be completed with
CALL QPCS/PCSINST3 ‘PCSACC’
CALL QPCS/PCSINST4 ‘PCSACC’
Changes in PCSACC/400 V4R1M1 as from May, 21th. 2007
Installation
Program PCSINST3 can only be executed for recovery, if library QPCSO exist.
Create new administrator records using command ADDPCSOWN
New fields on the 3. user page are not correct initalized, FTP login can run into problems for these users.
Maintenance of user records
For displaying controlled users in blue or not controlled users in green, new fields are not used in Programm DSPUSR.
For option K = short cut menu the installed i5/OS was not retrieved, release dependend fields couldn't be changed.
.
For *GROUP, *ANONY and *CROSS user records values RTV no longer displayed.
Radiobuttons GETCUR, GETDIR and SELDIR can only be used in change mode in program CHGUSR.
Startmenu CHGPCS
*SECOFR now allways can use option 99 to enter new license keys.
From TELNET menu options for displaying logging data now are called correct.
Changes in PCSACC/400 V4R1M2 as from September, 26th. 2007
All data records
Format of action, create and change date was changed from TTMMJJJJ to JJJJMMTT. Now field „date" can be used as sort field.
All database access data
Additionally to the application information -new SVFD- data rights raud were displayed as well as the data access rights which will be displayed on the user and library level in the same position. If there is no object existing within i5/OS, Object names will be displayed in green. Instead of text and access rights also creation or change date can be displayed in combination with creation or change user name.
The selection fields will be saved.
Display of all Libraries, Library with files and File members of a file
The same new functions as for all database access data can be used.
Key can be also creation or change date ascendend or descendend.
Instead of dynamic subfile display, all records can be displayed with the number of records in the header. This function is important in combination with the use of wildcards. Now all selected records can be marked with F6 for copy or deletion. Up to now you had scroll to the end of the subfile data.
Additional fields are available to display only library, file or member records without i5 object or to display library records without stored file records or file records with member records. Some of the selection fields will be saved separately. On library level you can make a selection, with this selection you can display the Files of a library and Members of a file as well.
Now EDTOBJAUT or DSPOBJAUT can be used in all displays.
You can reset the values in the start windows to default values by using F8=Reset.
If the text of one library record was changed, this text will be taken over for all other records in PCSACC/400 with the same key, the description of the i5/OS object library will be changed as well.
This is effective for file, data queue, data area, member and user records. This function can be controlled / switched off by using new system values.
Display of IP is replaced with F for FTP
Display of all user records: the display of IP, on position 62/63 in the subfile, has been removed.
Since PCSACC/400 V4R1M1 IP address control is possible for all functions and IP records are always created. In the window F5=Refresh selections for IP addresses and Mail have been removed. Now you can use selection F to display all FTP users, this is a new function. The new filed PTCPIP was set to value 1 at installation time based of the stored data. Exit programs for FTP: PCSLOG, PCSLO2 and PCSFTP set this field always to value 1. Field PTCPIP is designed as DisplayOnly field, but change mode can be activated via a new field in the user properties.
Bugs and additional functions in exit programs
Netserver access to IFS: Today PCSACC/400 supports 256 bytes only but this will be enhanced in a future release to 1024 bytes.
If the received data are longer then 256 bytes Exit Programm PCSIFS runs into array error. Now the first 256 bytes are in use only.
SQL/ODBC exit Programm PCSSQ2 removes comment lines like /* This is my best SELECT *FROM TEST.CUSTOM */ at the beginning of the data string. Up to now older program versions produced an error at this point.
Exit programs PCSLOG, PCSLO2 and PCSFTP transfers user names always into upper case, name like oracle are no longer possible,
TELNET exit program PCSTEL selects a generic name, if field PTGEN has value 0 and field PTGEN a generic name and no display name was transmitted to the exit Programm to beware of generating names like QPADEV0001 by i5/OS. Now generic names can also be used, if a name was transmitted but begins with QPADEV.
i5/OS V5R4: Today there are sometimes no subport informations stored in the file PCOUT at a TELNET session LOGOFF. To find out start and end time of a TELNET session, this information can be helpfull. There ar no consequences to the programs, because it is information data only. With the newest ptf level this problem should be solved.
More changes in maintenance programs
3. user page: FTP/TFTP and IP addresses User directories for FTP
Displayed in blue = existing in i5/OS IFS
Displayed in green = no IFS object exists
Displayed in red = the IFS object is a streaming file instead of a directory.
Be carefull, FTP logins with not existing directory entries in this field will be rejected by i5/OS.
Quick maintenance menu: Option F4 can now be used on page 3.
New system values can be used to select the language for displayed messages of rejected FTP logins in the QSYSOPR message queue. Now it is possible to select the display of the used password for rejected ANONOYNMOUS and CROSSOVER accesses.
On the start menu of CHGPCS now option 99 can be used always.(You need to be *SECOFR)
Starting group maintenance without stored group records no longer results in error.
Execution of invalid commands in program PCSNETA like e.g.,-WRKSBSJOB QUSRWRK- (when subsystem QUSRWRK is down) are now under control of the program..
Maintenance of IFS records
Program PCSIFS can now reset user profiles disabled from I5/OS for use of netserver.
Display log entries with Programm DSPLOG
No data are displayed very often , if program DSPLOG was called with start date = today and time = 00:00:00. The reason is, that there are no records stored for this day. Now the END records includes additional information (Date and time) of the first and the last record in the file. F15 can be used to display the start windows with the values from the first record. This date will not be saved, until you change the date/time or call F15 twice. The data can also be displayed in descendend. If you select this new option with date/time 2007/09/19 00:00:00, all records beginning with 2007/09/18 23:59:59 are displayed. The refresh function key F5 is disabled then.
Send local error messages to a remote System using TCP/IP
Up to now messages could only be send to a remote console via SNA SNDNETMSG.
Now you can send messages from a local system controlled by PCSACC/400 using several message queues and the TCP/IP server *REXEC = RUNRMTCMD to a remote console.
Therefor you need 2 CL programs. Source code with documentation for programs SNDBATCH and SNDMSG01 is stored in file QCLSRC. Program SNDBATCh should run as AJE in subsystem QBATCH for example. For every message queue you must modify a copy of program SNDMSG01. If a message arrived in the message queue this program will be called and executed with RUNRMTCMD command SNDMSG on the remote system. System informations are added to the message text.
Changes in PCSACC/400 V4R1M2 as from November, 30th. 2007
Display all file records of a library
Subfile has not been refreshed completely after return from display of all members.
Conversion of access rights with program LOGPCS sets a wrong date
Invalid data will be corrected with this version.
First time installation
Some records have been delivered uncompletely when doing a first time installation.
Now all fields can be changed, independendly of the supported OS/400 release. If these fields are not supported in the installed OS/400 release, these text fields are displayed in green.
Update of user records
Update of user records did not run correct under certain circumstances.
Telnet address data
Default record *.*.*.* cannot be deleted anymore.
SQL/ODBC Programs PCSSQ2 and LOGPCS
Up to now long names have been marked with " before and after the name. Now a [ ] will be accepted as well.
Change-over to new Hardware
Before placing into operation, data has to be taken over after finishing of testing phase. Programs PCSCOPY, PCSOFF and PCSON, provided in source code, can be used for PCSACC/400 files. Documentation is included in the programs. Program PCSCOPY still has to be converted.
Display of new fields, starting V4R4 and V5R2
These Displays were exchanged from V4R4 up to V5R1. All fields valid starting with V5R2 have been displayed starting with V4R4 and all fields valid starting with V4R4 have been displayed starting with V5R2.
Display of all libraries, all files of a library and all members of a file
The user name that has been just edited, has been replaced with the jobuser in the subfile display.
Print program PRTUSR, Printing of a user overview
Print display has been complemented by F for FTP and the selection *FTPUSER in the command.
Online documentation First help
New topics:
Mirroring
Upgrade to a new i5/OS release
Hardware replacement
First time installation: What to do next
Telnet and Single Signon
These pages will be completely finished within the next weeks.
Consolidation of user data rights to groups (MOVE)
Copy function 3 + F10:
At last group file will not be maintained correctly if users will be consolidated to groups by using option „2" .
Only user maintenance program DSPUSR with option F5 and selection of a group, can't display group members.
Exit programs will not be effected by this.
Circumvation
Use Copy function with option 1 and later add group name by hand into the user record.
The problem was fixed in this version. A bug in module GRPADDCHK of service Programm SRVCHG was the problem.
Program QPCS/KORRGROUP will be used at installation time to repair the data.
Changes in PCSACC/400 V4R1M3 as from January, 10th. 2008
Supported i5/OS releases
This release will be delivered as OS/400 V4R3 Code. It is tested up to i5/OS V6R1 inclusuvely. Therewith we can ensure the executability before the announcement of i5/OS V6R1.
Subexit programs
There is a new selection 2 at the return parameter in program PCSNETA. This selection allows that an active testmode will be ignored and the access will be rejected actually, if there is a rejection of an access by an subexit program.
FTP login exit programs PCSLOG and PCSLO2
Now passwords up to 128 bytes (maximum) are being supported. If a password is longer than 10 bytes in case of a crossover access, the first 10 bytes will be considered only.
Date of activity
The date of activity has been stored wrong since the conversion of date in PCSACC/400 V4R1M2. Incomplete data will be corrected during the installation. The error in Programm LOGPCS has been eliminated.
Display of all data base files, libraries, files and members of a file
There is „----" displayed in groups, because these values are not existing anymore.
Activation / deactivation of exit programs
Starting with i5/OS V5R3, command WRKFCNUSG can now be called as *SECOFR.
Subfiles
Starting with this version and OS/400 V4R5 More ... and Bottom will be displayed in the subfiles (english version) instead of Weitere ... and Ende.
Testing of exit programs
Command PCSTEST has been added to make sure that one can test an exit program by using DEBUG in the event of an error case of the system. An OS/400 Call be simulated with that. This command is not intended to be used by customers. Upt to now the command does not include any kind of documentation. All error messages are in german language at this time.