No, he's not right. TSO segment contains "last used" procedure name.
Quotation because it is *usually* last used, but it can be set up by
RACF admin, etc. It is not a proof that user is allowed to use that
procedure. In most cases yes, it is last used procedure and nothing was
changed, however sometimes user may loose access between logons. Or RACF
admin set procedure without checking users access to that procedure.
And of course this is only one procedure name, while user can be allowed
to use many of them, including generic profiles in TSOPROC class.
Regarding generic profiles - this is my humble observation - people tend
to use discrete profiles only in that class. Sometimes I asked why and
got answer "no generics allowed" - this is not true. There was a mistake
in old "Effective RACF Administration" manuals, but all TSO-related
classes accept generic profiles.
Regards
--
Radoslaw Skorupka
Lodz, Poland
W dniu 25.05.2022 o 01:18, Bob Bridges pisze:
No, he's right. You are, too (except about him being wrong). He said you can't tell
what's allowed by looking at the <emph>TSO segment</emph>, which is true; you
look for a profile in the TSOPROC resource class to see what's permitted, which is what I
gather you're saying.
---
Bob Bridges, [email protected], cell 336 382-7313
/* In an emergency, a drawstring from a parka hood can be used to strangle a snoring tent
mate. -"Camping Tips" */
-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of
Radoslaw Skorupka
Sent: Tuesday, May 24, 2022 16:20
1. You're wrong. "what is allowed" is described in TSOPROC class.
2. Pity. However feel free to suggest better solution.
--- W dniu 20.05.2022 o 13:12, Seymour J Metz pisze:
1. TSO segments will only tell you what is allowed; you still need SMF to
tell how often they are logging on.
2. What about logon procs used for an activity that is only needed at long
intervals?
________________________________________
From: IBM Mainframe Discussion List [[email protected]] on behalf of
Radoslaw Skorupka [[email protected]]
Sent: Thursday, May 19, 2022 8:03 PM
Do you mean TSO logon procedure?
There are some ways:
1. Review users' TSO segments - you will find last logon procedure used.
Of course you cannot exclude that some user likes to change his
procedure every week, or just because of some needs. But this is unlikely.
2. Use RACF features like AUDIT. You will get SMF record everytime the
procedure is used. Advice: first eliminate "popular" procedures because
you already know they are used. Of course this method means change audit
today and wait for results. How long? You have to decide. And again -
you cannot exclude some VIP will logon using his favourite proc next month.
3. Look at SMF30. Create some report, omit the most popular names, et
--- W dniu 16.05.2022 o 04:33, James C. pisze:
I needed to make a change to the logon procs but noticed that there were quite
a few. I’d like to know which procs are actually being recently used. Does this
information get recorded by SMF? If so, which record type?
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
