Kris Buelens <[EMAIL PROTECTED]> wrote :-

>> As to avoid RACF revoking users due to inactivity: XAUTOLOG them every 
now and then.

Revoke due to inactivity is something that not only affects MAINT. 
Remember, this is not virtual machine activity but authentication 
activity.

If, like us, you have a 60 day inactivity limit and systems that stay up 
much longer than that then, at the next IPL, you can find that nearly all 
your service machines are revoked because they have not been logged on for 
more than 60 days. 

There are various ways of dealing with this but the method we use is to 
connect all such servers to a group called VMDSC and then, nightly, we run 
a process that issues a resume for all these users. That resets the 
inactivity timer (and the odd failed attempt to log on to MAINT).

The other thing is that MAINT, having SPECIAL, will not actually be 
revoked but will cause a RACF request for a response to be put on to the 
operator console. This can be awkward and annoying but is better than 
getting an immediate revoke.


Colin Allinson

Amadeus Data Processing GmbH

Reply via email to