RDF System Management Manual

Table Of Contents
Installing and Configuring RDF
HP NonStop RDF System Management Manual524388-003
3-13
Using the OWNER Attribute to Allow Super Group
Users to Start, Stop, and Manage RDF
RDFMONO. The RDF monitor program communicates with the TMP in privileged
mode and must be licensed with FUP or by running the RDFINST macro.
RDFMONO can be owned by any user ID.
RDFNETO. The RDFNETO program opens and writes to the network
synchronization file on each of the primary systems participating in the RDF
network. RDFNETO can be owned by any user ID.
RDFPRGO. The RDF purger program purges image files in privileged mode and
must be licensed with FUP or by running the RDFINST macro. RDFPRGO can be
owned by any user ID.
RDFRCVO. The RDF receiver program opens the image files in privileged mode
and must be licensed with FUP or by running the RDFINST macro. RDFRCVO can
be owned by any user ID.
RDFSCAN. The RDFSCAN program contains no privileged calls or privileged
code and need not be licensed. RDFSCAN can be owned and run by any user ID.
RDFSNOOP. The RDFSNOOP program opens the image files in privileged mode
and must be licensed with FUP or by running the RDFINST macro. RDFSNOOP
can be owned by any user ID. RDFSNOOP must be run by a member of the super-
user group (user ID 255,nnn) to read the image files.
RDFUPDO. RDF updater programs open image files in privileged mode and must
be licensed with FUP or by running the RDFINST macro. RDFUPDO also must be
able to open database files for protected write access. When querying the backup
database files, users should always open the files for shared read access.
RDIMAGE. The RDIMAGE program opens the image files in privileged mode and
must be licensed with FUP or by running the RDFINST macro. RDIMAGE can be
owned by any user ID. RDIMAGE must be run by a member of the super-user
group (user ID 255,nnn) to read the image files.
Using the OWNER Attribute to Allow Super Group Users to Start,
Stop, and Manage RDF
By setting the OWNER global configuration parameter in a SET RDF configuration
command, you are specifying the primary owner of your RDF environment (such as
SUPER.RDF, for example). Doing so enables other super group userids to start, stop,
and manage RDF.
Once the OWNER attribute is set, you must use SAFEGUARD to limit EXECUTE
access to the RDFCOM object so that only those super group users authorized to
manage RDF can run RDFCOM. Failure to do so is a serious security risk because,
thereafter, all RDF objects run as the userid of the RDF OWNER.