wiped out all security classes for all users on test!!

Sort:
You are not authorized to post a reply.
Author
Messages
bgodwin
Veteran Member
Posts: 143
Veteran Member

    On the test system, I removed the security class for ONE person and it removed it for ALL USERS...We can no longer log into the test system, since none of us have SECURITY CLASSES or ROLES, etc.

    Our network admin cannot even log on.

    This was on the test system and I think my downfall was when I did a control home on the users list to go to the top and it put + signs to the left of each person...which I now recognize must have selected ALL users...when I went into the one user to remove her security class info...it removed it from all users!!!

    Any ideas on how to fix this w/o having to restore from backup??

    John Henley
    Senior Member
    Posts: 3348
    Senior Member
      - Are you running LSF9 or 8.0.x environment? - Did you delete the security classes, the users, or just the assignment of class to user?
      Thanks for using the LawsonGuru.com forums!
      John
      bgodwin
      Veteran Member
      Posts: 143
      Veteran Member

        we are on 8.0.3.7. without realizing that all users were selected via those + signs...I went into one user profile and removed the security class, printer and the groups on the right side of the profile.

        I did not do any deletes of users or classes...just took the class off of the user profile.

        Now I cannot get logged onto the system to check anything.

        John Henley
        Senior Member
        Posts: 3348
        Senior Member
          Can you turn off security via "lawsec off"?
          Thanks for using the LawsonGuru.com forums!
          John
          John Henley
          Senior Member
          Posts: 3348
          Senior Member
            Then you can use "rngdbdump gen user", "rngdbdump gen secclass", etc. to determine the extent of the damage. If it's all really gone, you'll need to restore $LADBDIR/GEN/* from a backup ... If it's just security classes, you can use secdump / secload from your production system to rebuild them...
            Thanks for using the LawsonGuru.com forums!
            John
            bgodwin
            Veteran Member
            Posts: 143
            Veteran Member

              all of that does sound promising. I've got GSC now working with my network guy to get this reviewed.

              Thanks for the encouragement!!

              bgodwin
              Veteran Member
              Posts: 143
              Veteran Member
                thanks for answering back....the gsc gave us some instructions as shown below and it worked so far as I can tell.

                The good news is that if you want to change all users at once...use the control home to select all (but do not do deletes with it)

                will need to get the LINTE/DB/GEN/USER and USER.i from backup, stop the environment service, rename the current LINTE/DB/GEN/USER and USER.i files so he has an online backup of them, copy the backup copies or USER and USER.i into the live LINTE/DB/GEN directory (make sure the permissions match the original files), start the environment services - log into laua and make sure the security classes are in place as expected.
                NOTE: any changes made to users since the backup will be lost - these would be changes to the security classes assigned to the users, user groups assigned etc.
                If they have any problems, will need to stop the services, put the original files back in place and manually re-assign the security classes, etc.
                You are not authorized to post a reply.