Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The administrative domain in PowerHA is used for automatically synchronizing security-related and configuration-related objects, such as user profiles, system values, and device descriptions, between nodes in a PowerHA cluster. A change to a resource on one node results in the same change occurring on the other nodes in the cluster.

Automated Setup

Previously, initial configuration and setup for the administrative domain in PowerHA required adding individual resources into the administrative domain one at a time, or using additional utilities provided by IBM Lab Services. With the 7.4 PTFs available December 2019, the Add Cluster Administrative Domain Monitored Resource Entry (ADDCADMRE) command has been enhanced to support *ALL and wildcards on the monitored resource and library parameters. In addition, an omit parameter has been added. These new options are supported for user profiles, authorization lists, classes, job descriptions, and subsystem descriptions. Now, many resources can be added to the administrative domain with a single command, simplifying administrative domain setup.

...

  • Support for replicating encrypted passwords set with the QSYSUPWD API. Previously, the use of the QSYSUPWD API caused the user-affected profile to be marked as inconsistent within the administrative domain.

  • Simplified implementation by eliminating the need to change user profile passwords after changing the value of the QRETSVRSEC system value from 0 to 1.

Tip

Tip: This improvement of eliminating the need to change user profile passwords after changing the value of QRETSVRSEC is also available in PowerHA for IBM i 7.2 (SF99776 level 13) and PowerHA for IBM i 7.3 (SF99876 level 10)

...