> Anyone have the JCL to set up a new user for TSO and other services for both
> OS/390 and Z/OS.
>
> Getting bored using IBMUSER and when trying to use TSO commands to do it have
> made a bit of a mess as it does not seem to work correctly (this could be
> me!) and no I do not wish to use the other default names but a specific one
> or two?
>
> This is assuming that the procedure is the same for both :)
Sounds like you're running on an ADCD system with their (IMO) messed up RACF
data base. I went through this exercise a while back - you want to think about
your user structure in the first place and start designing what you want to do.
Define groups that you give authority to, then hand out that authority to those
groups. Then define new users and make their default group one of those new
groups. Then you can clean up the STC ids (and whatever userids ADCD came with).
I don't think that I have much left of the original ADCD setup (well, I still
have *that* IBMUSER, and I still have their SYS1 group, but I got rid of all
the UACCs and migrated to generic profiles and to using AUTOUID/AUTOGID - AIM
stage 3). These days, this is the job I use to define a new user on a z/OS 1.13:
//*********************************************************************
//*********************************************************************
//******* ACHTUNG: CAPS OFF!!!! ************************************
//*********************************************************************
//*********************************************************************
//PATHS EXEC PGM=IKJEFT1B
//SYSTSPRT DD SYSOUT=*
//SYSTSIN DD *
PROF MSGID WTPMSG
MKDIR '/u/umnt/userid' MODE(7 5 5)
//DEFALIAS EXEC PGM=IDCAMS
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
DEFINE ALIAS(NAME(USERID) RELATE(USERCAT.TSOUSER)) +
CAT(CATALOG.MASTER)
//*
//DEFRACF EXEC PGM=IKJEFT01,DYNAMNBR=20
//SYSLBC DD DSN=SYS1.BRODCAST,DISP=SHR
//SYSTSPRT DD SYSOUT=*
//SYSPRINT DD SYSOUT=*
//SYSOUT DD SYSOUT=*
//SYSIN DD DUMMY
//SYSTSIN DD *
AU USERID DATA('Name') DFLTGRP(SYS4) PASSWORD(SYS4) +
OMVS(HOME('/u/umnt/userid') PROGRAM('/bin/sh') AUTOUID) +
TSO(ACCTNUM(ACCT#) COMMAND(ISPF) PROC(ISPFPROC) SIZE(2048000))
ADDSD 'USERID.**' UACC(NONE) OWNER(USERID)
PE 'USERID.**' CLASS(DATASET) ID(USERID) ACCESS(ALTER)
PE 'USERID.**' CLASS(DATASET) ID(SYS0) ACCESS(ALTER)
PE 'USERID.**' CLASS(DATASET) ID(SYS2) ACCESS(READ)
PE 'USERID.**' CLASS(DATASET) ID(SYS4) ACCESS(READ)
//
SYS0 is the sysprog group with special/operations/superuser authority
SYS2 is the general TSO user group
SYS4 is the group for TSO users with limited rights
Is anyone still interested in my cleanup jobs to be submitted to the cbttape?
Barbara
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
