On 5/16/2006 10:22 AM, Dave Cartwright wrote:
I would like to report on those Users who are defined to RACF, who have a
TSO segment and who are not revoked. Unfortunately our RACF DB contains
many revoked Users and many Users without a TSO segment (IMS Users). If I
unload the Database there are different record types for Userid and TSO
segment, so it is not easy to process. I would accept a report of Users
with TSO segments who ARE revoked.
Anybody know how to do it?
It is actually rather simple to write a REXX exec that will read the
output of IRRDBU00. The exec would look for the 0220 records that
represent the TSO segment, and the 0200 records that represent user IDs.
You basically remember the ID of the last 0220 record, and then when
you get a 0200 record you compare its ID with the saved ID. If they
match, the user has a TSO segment. Otherwise he doesn't.
Walt Farrell, CISSP
z/OS Security Design, IBM
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
