Thank you. I noted in a listing of STARTED tasks I had ** with a user of IBMUSER. I updated it to be =MEMBER.
On Wed, Nov 4, 2015 at 4:31 PM, Nims,Alva John (Al) <[email protected]> wrote: > Short Answer: Yes. > From "z/OS Security Server RACF Command Language Reference" (both z/OS > 1.13 & z/OS 2.02 versions) > > USER(=MEMBER) > Specifies that the procedure name should be used as the user ID. If > =MEMBER is specified for USER, a group-name value should be specified for > the GROUP operand. If =MEMBER is specified for both USER and GROUP, a > warning message is issued and problems might result when the profile is > used. For information, see z/OS Security Server RACF System Programmer's > Guide. > > And to further muddle things up: > GROUP(=MEMBER) > Specifies that the procedure name should be used as the group name. If > =MEMBER is specified for GROUP, a userid value must be specified for the > USER operand or RACF uses the started procedures table to assign an > identity for this started task. If =MEMBER is specified for both USER and > GROUP, a warning message is issued and problems might result when the > profile is used. For information, see z/OS Security Server RACF System > Programmer's Guide. > > Is an option on the RDEFINE command. > > Al Nims > Systems Admin/Programmer 3 > EI&O > University of Florida > (352) 273-1298 > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of Mark Pace > Sent: Wednesday, November 04, 2015 3:32 PM > To: [email protected] > Subject: z/OS 2.2 install - racf question. > > In the past when installing a new z/OS - I've always skipped the part that > says to Create or Update ICHRDNST. Instead I have copied ICHRIN03 to the > new SYS1.LPALIB > > I've since forgotten why I do this. So I did some research and found that > I probably should have converted my ICHRIN03 to STARTED procedures. I > found the sample to run and ended up with this output. > > SETR > GENERIC(STARTED) > > *RDEFINE STARTED ** STDATA( USER(=MEMBER) GROUP(STCGRP) PRIVILEGED(NO) > TRUSTED(NO) TRACE(YES) ) * > SETROPTS CLASSACT(STARTED) > RACLIST(STARTED) > SETROPTS RACLIST(STARTED) > REFRESH > > That RDEFINE does not look right to me. USER=(=MEMBER) is that possibly > correct? > > > > -- > The postings on this site are my own and don’t necessarily represent > Mainline’s positions or opinions > > Mark D Pace > Senior Systems Engineer > Mainline Information Systems > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- The postings on this site are my own and don’t necessarily represent Mainline’s positions or opinions Mark D Pace Senior Systems Engineer Mainline Information Systems ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
