Hi Frank,

The short answer is 'yes, you can have the same UID across LPARs/RACF 
environments'.  Longer answer is that it may not be as easy as you'd like 
depending on how your RACF environments are set up.  There are several RACF 
FACILITY class profiles (like BPX.NEXT.USER and BPX.UNIQUE.USER) that may trip 
you up.  You'll need to chat with your security admins.  BPX.UNIQUE.USER says 
that every different RACF ID needs a unique unix UID.  BPX.NEXT.USER is a 
convenient way to just have RACF assign unique UID/GID values as new users are 
given OMVS segments in RACF.  Typically what I've seen is the RACF admin will 
set a base "next user" and allow RACF to assign users as needed, but they will 
reserve a range of UIDs for situations like yours where you need a hard-coded 
UID.  As Radoslaw (at least I think is was him) mentioned, you'll need to do 
the chown jockeying to get your directory tree set to the appropriate UID/GID 
as part of synchronizing the UIDs.

Bottom line is yes, your RACF admin can manually assign a UID/GID to your RACF 
userIDs and they can be the same across RACF environments.

Rex

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of 
Frank Swarbrick
Sent: Wednesday, June 14, 2023 1:17 PM
To: [email protected]
Subject: [EXTERNAL] Unix file system ownership

I'm guessing this is hopeless, but figured I'd ask anyway.
For "some reason" we have separate RACF databases for each of our environments 
(dev/test vs production).  Because of this (I think it's the reason!) my Unix 
UID is different in production than in dev/test.  This means that even though 
my personal Unix file system is mounted at the same mount point in each, only 
in one of them (dev/test) do I technically "own" it.  I'm wondering if there 
might be some way I can "own" it in both systems.  Can UIDs be explicitly set 
to a particular value?  Or can one be mapped to another?  Or something else?


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
The information contained in this message is confidential, protected from 
disclosure and may be legally privileged. If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful. If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format. Thank you.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to