On Wed, 12 Aug 2009 10:54:11 +0100, Jim McAlpine <[email protected]> wrote:
>I need to take our existing RACF profiles across to a new z/OS system which >has an existing RACF database and somehow merge them into the new system. >Is there a way to accomplish this. I can't simply replace the RACF database >on the new system with my existing one because it contains profiles which >are required for the new system. You can (with manual effort to figure out which differences to accept) use DBSYNC as others have mentioned. If you search the RACF-L archives you'll find suggestions for using DBSYNC for this purpose (which is not its primary purpose). IBM Tivoli zSecure (formerly Consul RACF) provides merging functions that make this process much simpler. See http://www-01.ibm.com/software/tivoli/products/zsecure-admin/features.html for more information. I believe other vendors also have products that will assist in this effort. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
