On Mon, 6 Aug 2018 11:13:49 +0000, Blake, Daniel J [CTR] <dbl...@fdic.gov> wrote:
>Years ago I was called to assist two different customers who both screwed up >the only Special userid. In both cases I was able to switch to the IBM >supplied RACF data bases that came with a ServerPac. Logged in with IBMUSER, >switched back and reset the SPECIAL userid. > >This was many years ago and I don't have a RACF protected system to play on. >Is this option still available? It's hard to say whether that would work. For one thing, without an IPL you can only switch to a database of the same name as the one(s) you're already using. Every shop should have procedures in place for handling a situation like this without an IPL, and should also have additional procedures in place to IPL a "one-pack" recovery system in case their normal recovery procedures don't work for some reason. A few common procedures that can help without an IPL: (1) The ability for someone with SPECIAL to logon to an MVS operator console and issue RACF commands. (2) An STC with SPECIAL that will issue an ALTUSER RESUME for one or more of the SPECIAL users. (3) The ability for someone with SPECIAL to logon to TSO without using a session manager. There are others, but those are easy. They do need to be setup in advance and tested regularly, along with recovery procedures for other critical system components (no JES, no catalog, etc.). -- Walt ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
