On Tue, 27 Dec 2011 14:29:12 -0600, McKown, John <[email protected]> wrote:
>A RACF id can be 8 characters. But, in that case, they cannot have a TSO >segment. So they cannot be used to logon to TSO. If you try, you get a message >of >some sort from the TSO logon process. They can be used for batch jobs, UNIX >shell accounts, ftp accounts, CICS logons, and probably others (like DB2 and >IMS, but I don't know). Actually, a user with an 8-character user ID should be able to have a TSO segment, John. I'm not aware of anything that would prevent that, unless possibly it's something related to creation of the segment trying to add the user to SYS1.BRODCAST. If you've configured TSO/E to use user brodcast data sets even that should not be a problem. But you're right, they would not be able to logon to TSO. -- Walt Farrell IBM STSM, z/OS Security Design ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
