Show TOC

Logical Server Access ConfigurationLocate this document in the navigation structure

Configure logical server access.

Example

Assume that the root login policy allows access to logical servers ls4 and ls5 and login policy lp1 exists with no logical server assignment. The statement below effectively assigns login policy lp1 to logical servers ls4 and ls5.

Assign logical server ls1 to login policy lp1:

ALTER LOGIN POLICY lp1 ADD LOGICAL SERVER ls1

Example

This statement allows access of logical servers ls2 and ls3 from login policy lp1:

ALTER LOGIN POLICY lp1 ADD LOGICAL SERVER ls2, ls3

Example

Modify login policy lp1 to allow access to ls3 and ls4only:

ALTER LOGIN POLICY lp1 ADD LOGICAL SERVER ls4

ALTER LOGIN POLICY lp1 DROP LOGICAL SERVER ls1, ls2

or:

ALTER LOGIN POLICY lp1 SET LOGICAL SERVER ls3, ls4

Example

Modify login policylp1 to deny access to any logical servers:

ALTER LOGIN POLICY lp1 SET LOGICAL SERVER NONE

Example

Drop current logical server assignments of login policylp1 and allow it to inherit the logical server assignments of the root login policy:

ALTER LOGIN POLICY lp1 SET LOGICAL SERVER DEFAULT
Usage
ADD, DROP, or SET clauses let you configure the logical server assignments of a login policy:
  • ADD adds new logical server assignments to a login policy.
  • DROP deletes existing logical server assignments from a login policy.
  • SET replaces all logical server assignments for a login policy with a new set of logical server.

Use only one ADD, DROP, or SET clause. Use SERVER, NONE, and DEFAULT clauses only with the SET clause. Specify a particular logical server name only once per ls-assignment list or ls-override list.

An error is returned if:
  • Any logical server specified with the ADD clause is already assigned to the login policy.
  • Any logical server specified with the DROP clause is currently not assigned to the login policy.
  • Logical server assignment change may cause a membership overlap among assigned logical servers.

SYS.ISYSIQLOGINPOLICYLSINFO stores logical server assignment information. For each logical-server override of a login policy option, a corresponding row exists in ISYSIQLOGINPOLICYLSINFO.