Chris,

for #2 we use

ECHO      *** will delete profiles of not existent accounts ... ***
MAIN.PUB.VESOFT PARM=1;INFO="&
SEC DELETE @.@(NOT ACCTEXISTS(ACCOUNT) AND ACCOUNT<>'@')"
ECHO

ECHO      *** will delete profiles of not existent mpe-users ... ***
MAIN.PUB.VESOFT PARM=1;INFO="&
SEC DELETE @.@(NOT USEREXISTS(USER+'.'+ACCOUNT) AND USER<>'@')"
ECHO

#1 is a bit more complicate: you have wildcards in Sec/3000 so that @.@
will match every MPE user/account!
So, we do niot check this. On the other hand, having VEBATCHPROFILE OFF,
it's O.K. that not all MPE-users do not have Sec/3000 profiles (the batch
users).

Best regards, Andreas





Chris Bartram <[log in to unmask]>@RAVEN.UTC.EDU> on 22/04/2002 20:35:59

Please respond to [log in to unmask]

Sent by:  HP-3000 Systems Discussion <[log in to unmask]>


To:   [log in to unmask]
cc:
Subject:  [HP3000-L] report of security/3000 vs. MPE userids?


Before I possibly reinvent the wheel...

Anyone know of a way to generate a list of:

1) MPE user ids for which no Security/3000 profile matches it

2) Security/3000 profiles which have no corresponding MPE userid(s)

?

Ran the full VEAudit and don't get any such listing.

TIA,
  Chris Bartram

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *