Prev
Next
Forums Infor / Lawson Platforms S3 Security

wiped out all security classes for all users on test!!

 6 Replies
 0 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
bgodwin
Veteran Member
Posts: 143
Veteran Member
4/8/2008 5:36 PM

    On the test system, I removed the security class for ONE person and it removed it for ALL USERS...We can no longer log into the test system, since none of us have SECURITY CLASSES or ROLES, etc.

    Our network admin cannot even log on.

    This was on the test system and I think my downfall was when I did a control home on the users list to go to the top and it put + signs to the left of each person...which I now recognize must have selected ALL users...when I went into the one user to remove her security class info...it removed it from all users!!!

    Any ideas on how to fix this w/o having to restore from backup??

    John Henley
    Posts: 3353
    4/8/2008 5:52 PM
      - Are you running LSF9 or 8.0.x environment? - Did you delete the security classes, the users, or just the assignment of class to user?
      Thanks for using the LawsonGuru.com forums!
      John
      bgodwin
      Veteran Member
      Posts: 143
      Veteran Member
      4/8/2008 6:03 PM

        we are on 8.0.3.7. without realizing that all users were selected via those + signs...I went into one user profile and removed the security class, printer and the groups on the right side of the profile.

        I did not do any deletes of users or classes...just took the class off of the user profile.

        Now I cannot get logged onto the system to check anything.

        John Henley
        Posts: 3353
        4/8/2008 6:10 PM
          Can you turn off security via "lawsec off"?
          Thanks for using the LawsonGuru.com forums!
          John
          John Henley
          Posts: 3353
          4/8/2008 6:13 PM
            Then you can use "rngdbdump gen user", "rngdbdump gen secclass", etc. to determine the extent of the damage. If it's all really gone, you'll need to restore $LADBDIR/GEN/* from a backup ... If it's just security classes, you can use secdump / secload from your production system to rebuild them...
            Thanks for using the LawsonGuru.com forums!
            John
            bgodwin
            Veteran Member
            Posts: 143
            Veteran Member
            4/8/2008 7:28 PM

              all of that does sound promising. I've got GSC now working with my network guy to get this reviewed.

              Thanks for the encouragement!!

              bgodwin
              Veteran Member
              Posts: 143
              Veteran Member
              4/8/2008 8:30 PM
                thanks for answering back....the gsc gave us some instructions as shown below and it worked so far as I can tell.

                The good news is that if you want to change all users at once...use the control home to select all (but do not do deletes with it)

                will need to get the LINTE/DB/GEN/USER and USER.i from backup, stop the environment service, rename the current LINTE/DB/GEN/USER and USER.i files so he has an online backup of them, copy the backup copies or USER and USER.i into the live LINTE/DB/GEN directory (make sure the permissions match the original files), start the environment services - log into laua and make sure the security classes are in place as expected.
                NOTE: any changes made to users since the backup will be lost - these would be changes to the security classes assigned to the users, user groups assigned etc.
                If they have any problems, will need to stop the services, put the original files back in place and manually re-assign the security classes, etc.