Alan Altmark <[EMAIL PROTECTED]> wrote: > If anyone cares, you can CP SEND RACFVM SETRACF INACTIVE. This will cause > the CP-resident RACF code to begin to defer all requests back to CP, as > though RACF is not present, including LOGON. You don't have to deactivate > any classes or change any permissions. No auditing is performed.
> RACF will, however, prompt the OPERATOR for confirmation. A SETRACF > ACTIVE will start the wheels turning again and the OPERATOR will be > informed (but not prompted). I did know about this but it had not occurred to me that we might be able to use it. The circumstance I am thinking about is where we have one (limited use) system that has no RACF database and no RACFVM server. RACF would not be enabled in the SYSTEM CONFIG (RACF will not be licensed on this processor so the code will not be installed). It would be nice, if possible, to use the same CPLOAD MODULE (including the RACF calls) that we generate for our other systems but the only way that seems possible would be to use the RACF 'cuckoo code fake RACF server' suggested by Rob - if we can find a way to get it to defer back to CP for normal directory password checking. The other situation is in my 2nd level build system where I also have no RACF database available. I have seen all the suggestions for selectable PPF files and will probably go with something based on that. Because I want the normal build (including RACFVM) to be completely standard (SERVICE ALL & PUT2PROD), I will probably build a PPF override file for NONRACF only that will do a Non - RACF build after all the normal service and build has been done. Colin G Allinson Technical Manager VM Amadeus Data Processing GmbH T +49 (0) 8122-43 49 75 F +49 (0) 8122-43 32 60 [EMAIL PROTECTED] http://www.amadeus.com IMPORTANT - CONFIDENTIALITY NOTICE - This e-mail is intended only for the use of the individual or entity shown above as addressees . It may contain information which is privileged, confidential or otherwise protected from disclosure under applicable laws . If the reader of this transmission is not the intended recipient, you are hereby notified that any dissemination, printing, distribution, copying, disclosure or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this transmission in error, please immediately notify us by reply e-mail or using the address below and delete the message and any attachments from your system . Amadeus Data Processing GmbH Geschäftsführer: Eberhard Haag Sitz der Gesellschaft: Erding HR München 48 199 Berghamer Strasse 6 85435 Erding Germany
