CHGNWSA (Change Network Server Attributes)

CHGNWSA Command syntax diagram

 

Purpose

The Change Network Server Attributes (CHGNWSA) command changes the network server attributes of the system. Many of these attributes can be set on an individual user profile basis using the CHGNWSUSRA command. Many network server commands such as SBMNWSCMD and WRKNWSSTS can specify that information from the network server attributes should be used by specifying *NWSA for a given parameter.

Network server attributes are saved by the Save System (SAVSYS) command. Network server attributes are restored to the system when the operating system is installed.

 

Restrictions

  1. This command is shipped with public *EXCLUDE authority. When this command is shipped, authority is issued only to the security officer. The security officer can grant the use of this command to other users.
  2. To make changes to the NDSTREELST, NTW3SVRLST, WNTDMNLST, WNTLCLSVRL or NTWTCPSVRL parameters, have *SECADM special authority.
  3. The Windows NT domain and server names specified in the WNTDMNLST and WNTLCLSVRL parameters must follow the naming conventions of Windows NT.

 

Optional Parameters

PMTCTL
Specifies which network server attributes should be prompted for on the command.

*ALL: All parameters are prompted.

*NETWARE: Only those parameters that apply to *NETWARE servers are prompted.

*WINDOWSNT: Only those parameters that apply to *WINDOWSNT servers are prompted.

*GUEST: Only those parameters that apply to *GUEST servers are prompted.

DFTSVRTYPE
Specifies the default server type for the system. This attribute is used primarily as a default for those OS/400 commands that support multiple network server types.

If the default server type has never been set, it is defaulted to *WINDOWSNT.

*SAME: The default server type does not change.

*NETWARE: The default server type for the system is set to *NETWARE.

*WINDOWSNT: The default server type for the system is set to *WINDOWSNT.

*GUEST: The default server type for the system is set to *GUEST.

NDSTREE
Specifies the name of the default NetWare Directory Services (NDS) tree for the system. The tree specified should be the one most often used by iSeries 400 users.

If the NDSTREE parameter has never been set, it is defaulted to *NONE.

*SAME: The NetWare Directory Services tree name does not change.

*NONE: No default NetWare Directory Services tree is specified.

'NDS-tree-name': Specify the name of the default NetWare Directory Services tree.

NDSCTX
Specifies the distinguished name of a default NetWare Directory Services (NDS) context, associated with the tree specified by the NDSTREE parameter, to be used when a user issues OS/400 commands that use NDS objects.

If the NDSCTX parameter has never been set, it is defaulted to *ROOT.

*SAME: The default NDS context name does not change.

*ROOT: The default NetWare Directory Services context is set to the root of the NDS tree.

'NDS-context': Specify the distinguished name of the default NDS context to be used.

NTWTCPPORT
Specifies the TCP/IP port number to be used by the system when communicating to NetWare/IP servers in the network.

Valid values range from 50 through 50000. However, some of the ports in the range 1 through 1023 are used by system-supplied TCP/IP applications. If the user specifies one of these ports, it can affect the operation of those applications.

See the assigned numbers RFC for the definition of port numbers currently used by TCP/IP applications.

If the NTWTCPPORT parameter has never been set, it is defaulted to 20199.

*SAME: The default TCP/IP port number does not change.

TCP/IP-port-number: Specify the TCP/IP port number to be used.

NTWTCPSVRL
Specifies a list of up to 100 NetWare/IP servers running the Enhanced Integration for NetWare NLM (NetWare loadable module).

If the NTWTCPSVRL parameter has never been set, it is defaulted to *NONE.

*SAME: The list of NetWare/IP servers does not change.

*NONE: When *NONE is specified, the system will not use TCP/IP as the communication protocol when communicating to NetWare servers in the network.

'NetWare/IP-server-name': Specify the name of a NetWare/IP server running the Enhanced Integration for NetWare NLM.

NDSTREELST
Specify a list of default NetWare Directory Services (NDS) tree information used by the OS/400 user enrollment support to enroll OS/400 user and group profiles into the NDS tree. Each entry in the list will contain an NDS tree name and a list of default attributes associated with that tree.

Up to 10 entries can be specified for this parameter. An entry consists of a value from each of the following elements. A value must be specified for each of the 4 elements for each entry.

If the NDSTREELST parameter has never been set, it is defaulted to *NONE.

*SAME: The default NDS tree list entries do not change.

*NONE: When *NONE is specified, the default is to not enroll any OS/400 profiles into NDS trees.

NDS Tree List Entry

Element 1: NDS Tree Name

'NDS-tree-name': Specify the name of the NetWare Directory Services tree where the OS/400 user enrollment support will enroll OS/400 profiles. The remaining elements describe the network server attributes which are associated with this NDS tree.

Element 2: Default NDS User Object Context

Specifies the location in the NDS tree where NDS user and group objects are created when enrolling OS/400 users and groups into the NDS tree. Changing the default user object context will cause the user or group NDS object to be moved from the old context to the new one specified. The NetWare distinguished name must be specified for this element.

'user-object-context': Specify the NDS context where OS/400 users will be enrolled into the NDS tree.

Element 3: Default NDS Server Name

Specifies the default NetWare Directory Services server to be used by the system when enrolling OS/400 users and groups into the NDS tree.

*ANY: The system selects any active server to use when accessing the NDS tree.

'server-name': Specify the name of the default NDS server to be used by the system when enrolling OS/400 users and groups into the NDS tree. If this server is unavailable at the time the request is handled, the system attempts to find an active server that is available to handle the request.

Element 4: Default NDS Profile Object Name

Specifies a default NetWare Directory Services profile object that contains the profile login script to be used by the user when logging into the network. The NetWare distinguished name must be specified for this element.

*NONE: No profile login script is used by the NetWare user.

'profile-object-name': Specify the distinguished name of the default NDS profile object containing the profile login script to be used by a user when logging into the network.

NTW3SVRLST
Specifies a default list of up to 100 NetWare 3.12 servers into which the OS/400 user enrollment support will enroll OS/400 users and groups.

If the NTW3SVRLST parameter has never been set, it is defaulted to *NONE.

*SAME: The list of NetWare 3.12 servers does not change.

*NONE: When *NONE is specified, the default is to not enroll any OS/400 profiles into NetWare 3.12 servers.

'NetWare 3.12-server-name': Specify the name of a NetWare 3.12 server that OS/400 profiles will be enrolled into.

WNTDMNLST
Specifies a default list of Windows NT domains that will be used by the OS/400 user enrollment support to determine into which Windows NT domains OS/400 profiles are enrolled.

Each entry in the list will contain a domain, a user account template name, and a group type. The user account template name is the name of a Windows NT user identity that is to be used when creating new Windows NT users.

Up to 64 entries can be specified for this parameter. An entry consists of a value from each of the following elements. A domain name must be entered for each entry and must be unique within the list.

If the WNTDMNLST parameter has never been set, it is defaulted to *NONE.

*SAME: The Windows NT domain list entries do not change.

*NONE: When *NONE is specified, the default is to not enroll OS/400 profiles into Windows NT domains.

Windows NT Domain List Entry

Element 1: Domain Name

'domain-name': Specify the name of the Windows NT domain where the OS/400 user enrollment support will enroll OS/400 profiles.

Element 2: Windows NT User Account Template Name

Specifies the name of a Windows NT user that can be used as a template when creating new Windows NT users in the Windows NT domain.

Note: Changing this value will not affect Windows NT users that are already enrolled in the domain.

*NONE: No Windows NT user account template is used when creating a new user identity in the Windows NT domain.

'User-account-template-name': Specifies the name of a Windows NT user account to be used when creating new Windows NT user identities in the domain.

Element 3: Windows NT Group Type

Specifies the type of group to be created in the Windows NT domain. This element is only used when enrolling group profiles.

*GLOBAL: A global group is created in the Windows NT domain.

*LOCAL: A local group is created in the Windows NT domain.

WNTLCLSVRL
Specifies a default list of Windows NT servers that will be used by the OS/400 user enrollment support to determine in which local Windows NT servers to enroll OS/400 profiles. Only those server names associated with locally configured integrated PC servers can be specified in this list.

Each entry in the list will contain a server name and associated user account template name. The user account template name is the Windows NT user account to be used when creating new Windows NT user identities on the server.

Up to 64 entries can be specified for this parameter. An entry consists of a value from each of the following elements. A server name must be entered for each entry and must be unique within the list.

If the WNTLCLSVRL parameter has never been set, it is defaulted to *NONE.

*SAME: The Local Windows NT server list entries do not change.

*NONE: When *NONE is specified, the default is to not enroll OS/400 profiles into local Windows NT servers.

Windows NT Local Server List Entry

Element 1: Server Name

'server-name': Specify the name of a Windows NT local server where the OS/400 user enrollment support will enroll OS/400 profiles. This server must be a locally configured integrated PC server.

Element 2: Windows NT User Account Template Name

Specifies the name of a Windows NT user that can be used as a template when creating new Windows NT user identities on the local server.

*NONE: No Windows NT user account template is used when creating a new user identity on the Windows NT server.

'User-account-template-name': Specifies the name of a Windows NT user account to be used when creating new Windows NT user identities on the local server.

Examples for CHGNWSA

Example 1: Setting network server attributes for NetWare

CHGNWSA   NDSTREE(NWTREE1)   NDSCTX(.MARKETING.HDQTRS.IBM)
  NDSTREELST(NWTREE1 NDSSVR1 MARKETING.HDQTRS.IBM *NONE)
  NTW3SVRLST(NTW3SVR2 NTW3SVR3)

The above command will change the system default NDS tree to be NWTREE1 and the default context to MARKETING.HDQTRS.IBM. The tree list consists of one entry for NDS tree NWTREE1 with a default server of NDSSVR1, default user object context of MARKETING.HDQTRS.IBM and no default profile object name. The NetWare 3.12 default server list is set to include servers NTW3SVR2 and NTW3SVR3.

Example 2: Setting network server attributes for Windows NT

CHGNWSA   DFTSVRTYPE(*WINDOWSNT)
  WNTDMNLST((DMN01 USRTMP1) (DMN02))
  WNTLCLSVRL((LCLSVR1 TMPL1) (LCLSRV2  *NONE))

The default server type is set to *WINDOWSNT. The default Windows NT domain list will be set to enroll profiles into domain DMN01 using user account USRTMP1 and into domain DMN02. Any Windows NT groups that are created in the domain will be created as global groups.

The Windows NT local server default list will be set to enroll profiles into local server LCLSVR1 using user account template TMPL1 and into local server LCLSRV2.

Example 3: Setting network server attributes for NetWare/IP

CHGNWSA   NDSTREE(NWTREE1)   NDSCTX(.MARKETING.HDQTRS.IBM)
  NDSTREELST(NWTREE1 NTWS1 MARKETING.HDQTRS.IBM *NONE)
  NTW3SVRLST(NTWS2 NTWS3) NTWTCPSVRL(NTWS1 NTWS2)

The above command will change the system default NDS tree to be NWTREE1 and the default context to MARKETING.HDQTRS.IBM. The tree list consists of one entry for NDS tree NWTREE1 with a default server of NTWS1, default user object context of MARKETING.HDQTRS.IBM and no default profile object name. The NetWare 3.12 default server list is set to include servers NTWS2 and NTWS3. The NetWare/IP default server list is set to include servers NTWS1 and NTWS2. Thus, NTWS1 and NTWS3 will use TCP/IP as the communication protocol.

Error messages for CHGNWSA

*ESCAPE Messages

CPFA44F
Network server attributes not changed. See previous messages.