Johnston, Robert E wrote:
I am installing z/OS 1.7 (coming from 1.4) and I have some confusion
about
the correct groups that the ZFS userid is connected to and what the
default
group should be.
RACFDRV does...
1) ADDGROUP ZFSGRP
2) ADDUSER ZFS DFLTGRP(ZFSGRP)
3) RDEFINE STARTED ZFS STDATA(USER(ZFS))
4) CONNECT ZFS to DFSGRP
RACFTGT then does...
5) ADDUSER ZFS DFLTGRP(STC) - which I assume should be STCGRP
6) CONNECT ZFS to DFSGRP
7) RDEFINE STARTED ZFS STDATA(USER(DFS))
My questions are:
What groups should your ZFS userid be connected to (ZFSGRP, DFSGRP, and
STCGRP)?
What is the correct default group for ZFS (ZFSGRP or STCGRP)?
What USER should be assigned to ZFS thru the STDATA, ZFS or DFS?
1. RACFDRV is for your existing system, which drive the installation
process (DRIVER), RACFTGT is for your new (TARGET) system. In fact there
is still no reason why the same object are named differently - it is
misleading.
2. All the RACF definitions in ServerPac are piece of sh*t. Yes, I mean
it. Those jobs takes most of time spent on reviewing, customizing and
submitting the jobs. Of course it is clearly commented that you have to
customize those jobs, however that should mean drop the jobs at all and
simply create few profiles except quite obvious DATASET profiles for new
(and only new) HLQs. All those connects with auth(join), all (except 2
maybe) permits for OMVSKERN are simply unnecessary. The same REFRESHes
for unchanged class (no profiles defined/modified). It's something like
"let's avoid ICH408I, let's give ALTER to everyone".
My $0.02
--
Radoslaw Skorupka
Lodz, Poland
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
