To simplify our setup, we granted the user ID IDADM full access (Example 22), 

which is not recommended for production environments.

Example 22   VSMSERVE AUTHLIST configuration file

MAINT                                                            ALL   

 IDADM                                                            ALL   

 VSMSERVE                                                         ALL 

Example 23 shows the VSMSERVE NAMELIST used in our scenario.

Example 23   VSMSERVE NAMELIST file

:nick.SERVER_FUNCTIONS           

:list.                           

MODIFY_SESSION_TIMEOUT_INTERVAL  

MODIFY_SERVER_TIMEOUT_INTERVAL   

QUERY_TIMEOUT_INTERVAL           

LOGIN                            

LOGOUT                           

TRUSTED_USER                     

VSMAPI_DEBUG                     

VSMAPI_NULL                      

VSMSERVE_SHUTDOWN                

:nick.AUTHORIZATION              

:list.                           

AUTHORIZATION_LIST_ADD           

AUTHORIZATION_LIST_REMOVE        

AUTHORIZATION_LIST_QUERY         

:nick.NAME_LIST                  

:list.                           

NAME_LIST_ADD                    

NAME_LIST_REMOVE                 

NAME_LIST_DESTROY                

NAME_LIST_QUERY                  

:nick.DM_CONTROL                  

:list.                            

STATIC_IMAGE_CHANGES_ACTIVATE     

STATIC_IMAGE_CHANGES_DEACTIVATE   

STATIC_IMAGE_CHANGES_IMMEDIATE    

DIRECTORY_MANAGER_COMMAND         

QUERY_DIRECTORY_MANAGER_LEVEL     

QUERY_ASYNCHRONOUS_OPERATION      

:nick.DM_PROTOTYPE_MANAGEMENT     

:list.                            

PROTOTYPE_NAME_QUERY              

PROTOTYPE_CREATE                  

PROTOTYPE_REPLACE                 

PROTOTYPE_DELETE                  

Dynamic Provisioning of SAP Environments using IBM DI for mySAP and Tivoli Provisioning Manager

37