On Wed, 21 Oct 2009 14:11:45 -0500, Mark Zelden <[email protected]> wrote:
>On Wed, 21 Oct 2009 14:18:20 -0200, Avelino <[email protected]> wrote: > >>Hi gurus, good morning! >> >>I know that it is not the best place to post this ( and I apologize for >>that ) but I tried the "CA Online Forum" without any success. On a recent >>past I setup the z/OS Health Checker using RACF without any problems. >>Anyway, I was requested to do the same under a set of LPARS that are secured >>by ACF2. I tried to search on Google, SHARE and some other sources and could >>not find any document that has the security setup for ACF2 as we have for >>RACF. So, what I am trying to find is any document that has the equivalent >>commands to setup the tool as I am pretty dummy to ACF2.. Any direction is >>welcome! >> > > >Our RACF admins don't understand ACF2 all too well (we have one ACF2 >LPAR), so I usually give them the commands (I have admin auth in the sandbox >version of that LPAR). I saved my job I ran... > >//TMP EXEC PGM=IKJEFT01,REGION=2M >//SYSTSPRT DD SYSOUT=* >//SYSTSIN DD * >ACF >SET RES(XFC) >COMPILE * STORE >$KEY(HZS) TYPE(XFC) >- UID(operator) SERVICE(READ) ALLOW >- UID(mvs_sysprog) SERVICE(READ,ADD,UPDATE,DELETE) ALLOW >END >// >//* >//* MAKE XFC RESIDENT >//* >//* ACF >//* SET CONTROL(GSO) >//* CHANGE RESDIR TYPES(R-XFC) ADD >//* >//* F ACF2,REFRESH(RESDIR) >//* >//* F ACF2,REBUILD(XFC) > Oh... in case it wasn't obvious to the "dummies" <grin> "operator" and "mvs_sysprog" in the example should be replaced with valid uid strings that are appropriate for your shop. As far as the comments in the JCL about making XFC resident, I did that in order to treat XCF (XFACILIT) the same was as FAC (FACILITY) is treated. XFACILIT is just an extension of FACILITY. Those commands should be entered in a separate job or interactively by an ACF2 admin. There is an ACF2 cookbook, but I doubt it has this. Many vendors (especially IBM) don't supply equivalent OEM security definitions for RACF like CA does (not a surprise since they own TSS and ACF2). You just have to understand something about administering those products in order to translate. Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:[email protected] z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
