Is there a command to "fix" the userids I have already set up? -----Original Message----- From: Linux on 390 Port [mailto:[email protected]] On Behalf Of Bruce Hayden Sent: Wednesday, June 12, 2013 2:15 PM To: [email protected] Subject: Re: After initial setup of generic vmbatch resource, all new ids are set up with discrete (I think)
What you do is leave that line in the config file but with no value, as in: RACF_RDEFINE_VMBATCH_DEFAULTS= Then, DIRMAINT won't create a VMBATCH resource when a new user is created. You'd also do this if you don't control Diag D4 (so you have no need for VMBATCH resources. And the same is true for VMRDR - if you don't use it or use generic resources instead, put this line in CONFIGRC DATADVH: RACF_RDEFINE_VMRDR_DEFAULTS= On Wed, Jun 12, 2013 at 1:53 PM, Scott Rohling <[email protected]>wrote: > Are you saying that you are using the DIRMAINT/RACF interface and it's not > generating VMBATCH right? If so, I'm not sure how much you can alter > this.. I'd have to read up on these options in CONFIGRC DATADVH where the > following line is from: > > RACF_RDEFINE_VMBATCH_DEFAULTS= UACC(NONE) AUDIT(FAILURES(READ)) > > I don't think that allows you to specify the generic profile though.. > > I have found that you're fairly limited in what you can do with the > DIRMAINT/RACF 'interface' .. you would likely have to use a DIRMAINT > exit > - or simpler - an EXEC you run after adding a new user via DIRMAINT to > tweak RACF the way you really want it. Either that or I just don't know > all the right RACFxxxxx = values in CONFIGRC DATADVH..... > > Scott Rohling > > > On Wed, Jun 12, 2013 at 10:31 AM, Will, Chris <[email protected]> wrote: > > > Here is a display of a new userid I set up with dirmaint. It looks > > like the vmbatch resource is not generic which I want > > > > rac rlist vmbatch linmon > > CLASS NAME > > ----- ---- > > VMBATCH LINMON > > > > LEVEL OWNER UNIVERSAL ACCESS YOUR ACCESS WARNING > > ----- -------- ---------------- ----------- ------- > > 00 DIRMAINT NONE ALTER NO > > > > When I initial set up racf using the procedures in the the > > Virtualization Cookbook for z/VM 6.2 all ids used a generic vmbatch. > > Here is an example from another lpar. > > rac rlist vmbatch linmon > > CLASS NAME > > ----- ---- > > VMBATCH ** (G) > > > > LEVEL OWNER UNIVERSAL ACCESS YOUR ACCESS WARNING > > ----- -------- ---------------- ----------- ------- > > 00 IBMUSER NONE ALTER NO > > > > How do I change these ids to use the generic vmbatch? > > > > Chris Will > > > > > > > > > > > > > > > > The information contained in this communication is highly > > confidential > and > > is intended solely for the use of the individual(s) to whom this > > communication is directed. If you are not the intended recipient, > > you are hereby notified that any viewing, copying, disclosure or > > distribution of this information is prohibited. Please notify the > > sender, by electronic mail or telephone, of any unintended receipt > > and delete the original message without making any copies. > > > > Blue Cross Blue Shield of Michigan and Blue Care Network of > > Michigan are nonprofit corporations and independent licensees of the > > Blue Cross and > Blue > > Shield Association. > > > > -------------------------------------------------------------------- > > -- For LINUX-390 subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO > > LINUX-390 or visit > > http://www.marist.edu/htbin/wlvindex?LINUX-390 > > -------------------------------------------------------------------- > > -- For more information on Linux on System z, visit > > http://wiki.linuxvm.org/ > > > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, send > email to [email protected] with the message: INFO LINUX-390 or > visit > http://www.marist.edu/htbin/wlvindex?LINUX-390 > ---------------------------------------------------------------------- > For more information on Linux on System z, visit > http://wiki.linuxvm.org/ > -- Bruce Hayden z/VM and Linux on System z ATS IBM, Endicott, NY ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/ The information contained in this communication is highly confidential and is intended solely for the use of the individual(s) to whom this communication is directed. If you are not the intended recipient, you are hereby notified that any viewing, copying, disclosure or distribution of this information is prohibited. Please notify the sender, by electronic mail or telephone, of any unintended receipt and delete the original message without making any copies. Blue Cross Blue Shield of Michigan and Blue Care Network of Michigan are nonprofit corporations and independent licensees of the Blue Cross and Blue Shield Association. ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For more information on Linux on System z, visit http://wiki.linuxvm.org/
