Domino on the iSeries: Changing an ACL when you don't have access

Learn how to change an ACL so you can launch the Notes client on the server.

I frequently see tips for doing things that require launching the Notes client on the server. If you're running Domino on NT, that works great. But if you're running Domino on the iSeries, you need to get around the Access Control List (ACL) security.

Note: If "Enforce a consistent ACL across all replicas of this database" is set in a database's ACL, you cannot modify the ACL by opening it "locally" unless you're already in the ACL as Manager...regardless of the platform the Domino server is running on.

To do this, you need to have the ability to Get & Put files on the iSeries via FTP and delete a database off the server.

I begin by checking the "ServerStatus" tab in the Admin client to make sure nobody has the database open. Then, from a workstation with a Notes client, use FTP to get the database local. Then, using a terminal emulator, delete the database off the server.

On the workstation, launch the Notes client and open the database "locally" and add yourself (or your admin group) to the ACL as manager. Then FTP the database back to the Domino server's data directory.

I issue the Domino console command "dbcache flush" after deleting the database off the server and before using FTP to put it back. Also, on the iSeries platform, after using FTP to put the database back in the Domino server's data directory, you need to change the owner of the object to "QNOTES" (The AS/400 command is

CHGOWN OBJ('/path/database.nsf') NEWOWN(QNOTES) 

where "path" is the full path to the domino server's data directory and "database.nsf" is the database's filename.


This was first published in November 2002

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchEnterpriseLinux

SearchDataCenter

Close