Short Answer: Yes.
From "z/OS Security Server RACF Command Language Reference" (both z/OS 1.13 & 
z/OS 2.02 versions)

USER(=MEMBER)
Specifies that the procedure name should be used as the user ID. If =MEMBER is 
specified for USER, a group-name value should be specified for the GROUP 
operand. If =MEMBER is specified for both USER and GROUP, a warning message is 
issued and problems might result when the profile is used. For information, see 
z/OS Security Server RACF System Programmer's Guide.

And to further muddle things up:
GROUP(=MEMBER)
Specifies that the procedure name should be used as the group name.  If =MEMBER 
is specified for GROUP, a userid value must be specified for the USER operand 
or RACF uses the started procedures table to assign an identity for this 
started task. If =MEMBER is specified for both USER and GROUP, a warning 
message is issued and problems might result when the profile is used. For 
information, see z/OS Security Server RACF System Programmer's Guide.

Is an option on the RDEFINE command.

Al Nims
Systems Admin/Programmer 3
EI&O
University of Florida
(352) 273-1298

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Mark Pace
Sent: Wednesday, November 04, 2015 3:32 PM
To: [email protected]
Subject: z/OS 2.2 install - racf question.

In the past when installing a new z/OS - I've always skipped the part that says 
to Create or Update ICHRDNST.  Instead I have copied ICHRIN03 to the new 
SYS1.LPALIB

I've since forgotten why I do this.  So I did some research and found that I 
probably should have converted my ICHRIN03 to STARTED procedures.  I found the 
sample to run and ended up with this output.

SETR
GENERIC(STARTED)

*RDEFINE STARTED ** STDATA( USER(=MEMBER) GROUP(STCGRP) PRIVILEGED(NO)
TRUSTED(NO) TRACE(YES) ) *
SETROPTS CLASSACT(STARTED)
RACLIST(STARTED)
SETROPTS RACLIST(STARTED)
REFRESH

That RDEFINE does not look right to me.  USER=(=MEMBER)  is that possibly 
correct?



--
The postings on this site are my own and don’t necessarily represent Mainline’s 
positions or opinions

Mark D Pace
Senior Systems Engineer
Mainline Information Systems

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to