Walt, The STC is autrhorized runs AC(1) from a APF authorized library. We have been using r_admin to pass commands and retrieve output to other external security subsystems ( i,e.; ACF2 and TSS ). But functionally, TSS supports FDT , user defned segments and fields, I dont know what the RACF equivalent is for a user or in the case of TSS a ACID ..for example. I want to do an extract of the data because i feel and know this is the correct way of retrieving security data from TSS. But apparently RACF Extracts dont really work correctly on TSS database ...unless i am doing something wrong.
Regards, Scott www.idmworks.com On Mon, Feb 2, 2015 at 1:30 AM, [email protected] <[email protected]> wrote: > > The above will "work" but not sure what the ramifications are, however, > if you establish a TSO environment in a long-running "job" such as a > started task. > > The most obvious one is that you cannot stop (p) the STC that has a batch > TSO environment. You will always have to cancel it, unless everything else > running in that batch TSO asid has established a way to listen to operator > commands. > > And be very very careful that you don't invoke *authorized* TSO commands > from two tasks in parallel when they also deal with PDSE (as in any library > accessed in the address space is a PDSE data set). The result can be as > easy as PDSE latch contention to address space hang to having to restart > SMSPDSE to ENQ contention on SYSIEFSD Q10 and good night, system. I was > told that that can also happen if your installation runs VSAM RLS or any > other IBM component that uses latches, but while I have seen the PDSE > problems first and second hand, I have never seen it happen for any other > component. > > Barbara > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
