Data access control, Configuring syncfilesets, Destination file set – HP Integrity NonStop H-Series User Manual
Page 64
Scheduled Synchronization
HP AutoSYNC User’s Guide—522580-021
4-4
Data Access Control
Data Access Control
Users of AutoSYNC, especially the authorizer, should understand how multiple users
are managed by AutoSYNC, a non-privileged subsystem.
The monitor process reads the SYNCUSER table to determine which users are
configured to use AutoSYNC. The SYNCUSER table should be secured to prevent
unauthorized access.
For each AutoSYNC user, the monitor accesses the SFggguuu table to fetch the
synchronizations configured by the user. The SFggguuu table should be secured to
allow update access only by ggg,uuu.
When a scheduled synchronization for a user is performed, the AutoSYNC authorizer
is the initial process access ID. Before any data is accessed, the process access ID is
changed to the AutoSYNC user. This operation succeeds only if the authorizer has a
higher level of access (that is, is SUPER.SUPER or a group manager).
If the change of the user ID fails, the synchronization is aborted.
Configuring Syncfilesets
Once you have been added as a syncuser has been added, use the
command to specify file sets to be synchronized at regular intervals.
The command supports all the options of the
to control scheduling. The basic syntax of the command is:
Common synchronization options are described in
for Guardian files and in
Appendix 5, OSS File Synchronization
OSS files. This section describes the options that are specific to scheduled
synchronizations.
Each syncuser can configure up to 32767 syncfilesets.
Destination File Set
The destination may be either on the local system or on a remote system. You can
specify \* as the destination system name, but no other pattern for the system name is
allowed.
When you specify \* as a destination, a synchronization is performed to each remote
system (the local system is not included) that has AutoSYNC installed, licensed, and
where a monitor process with the same name is executing. Synchronization to remote
destinations that do not have AutoSYNC installed will be retried periodically.
ADD SYNCFileset source-file-set TO dest-file-set [,options ];