And if it's inactive?
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of
Gibney, Dave [gib...@wsu.edu]
Sent: Monday, October 26, 2020 5:35 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Right. Was hoping to be able to do it with a single user ID. Oh well!
From: IBM Mainframe Discussion List on behalf of
Allan Staller
Sent: Monday, October 26, 2020 1:03 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SMF to capture user login history
Martin,
Like minds think alike :)
Thanks,
Kolusu
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Classification: Internal
That would require an additional longon ID with a different default
group/grouplist.
This is a fairly common practice. One ID for everyday use and another with
elevated privileges when needed.
HTH,
-Original Message-
From: IBM Mainframe Discussion List On
Sri
Could you refer me to some documentation to help me better understand the
differences between BUILD and OVERLAY?
Sent from my iPhone
> On Oct 26, 2020, at 1:10 PM, Sri h Kolusu wrote:
>
> Cameron,
>
> OUTFIL is last on the list of processing. i.e
>
> INCLUDE
> INREC
> SORT
> OUTREC
>
Thanks.
Looks like there is not a way to do what I was hoping for, which would allow
for a set of default groups for a user, along with one or more groups that
require a user to explicitly log in to use them. For example, I am a member of
3 groups right now, and we must use GRPLIST because I
> Sri
> Could you refer me to some documentation to help me better
> understand the differences between BUILD and OVERLAY?
Cameron,
In simple terms as their names suggest
BUILD - builds the record from scratch
Overlay - The content is overlaid. ( Any area outside the LRECL can used
as Temp
Then I'm worried for you. :-)
Actually, this thread has been useful to me: The idea of the "portability"
of BUILD and OVERLAY versus the older forms came to me because of it.
We'll see how useful that actually it... :-)
Cheers, Martin
Martin Packer
Systems Investigator & Performance
Thank you both.
Sent from my iPhone
> On Oct 26, 2020, at 3:55 PM, Sri h Kolusu wrote:
>
> Martin,
>
> Like minds think alike :)
>
> Thanks,
> Kolusu
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access
Yes. But to do this, you will need to switch off "list of groups"
processing. This option was introduced in the 1980s and most shops decided
to turn it on.
The concept of the "connect group" as the group specified at logon time (or
if you like RACINIT time) has largely gone.
What you ask could
If foo is connected to groups bar and baz, don't you get different permissions
with LOGON FOO GROUP(BAR) and LOGON FOO GROUP(BAZ)?
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on
In general and with list of groups active, no. The only case of specific logon
group dependency I know of is the DFHSM situation Radoslaw mentioned.
> -Original Message-
> From: IBM Mainframe Discussion List On
> Behalf Of Seymour J Metz
> Sent: Monday, October 26, 2020 1:35 PM
> To:
Quick synopsis:
* BUILD creates the record from scratch. Also the same as INREC, OUTREC,
OUTFIL OUTREC - but nice in that you could move it from one to another.
* OVERLAY overwrites specified fields. Similarly movable.
Hoping this helps.
Cheers, Martin
Martin Packer
Systems Investigator &
Then yes. I think the last time this was surveyed n RACF-L, very few shops run
with it inactive.
> -Original Message-
> From: IBM Mainframe Discussion List On
> Behalf Of Seymour J Metz
> Sent: Monday, October 26, 2020 2:45 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: SMF to capture
W dniu 25.10.2020 o 14:44, Peter Relson pisze:
BTW2: I even experienced F37 abend in the past. It was related to huge
(at the time) Jaguar J1A tapes and good compression and ...problems in
RMM. AFAIK I put over 6TB (terabytes) of uncompressed data on 300GB cart.
Interesting. That completion
Yes,
To be correct and accurate: z/OS with RACF. And correct SMF
customization - that means SMF30 and SMF80 are collected. And SMF data
are archived.
That mean one may read SMF archives using IRRADU00. The output is (huge)
text file, quite well described in RACF Macros and Interfaces manual.
Try this in IBM KC - Networking on z/OS
https://www.ibm.com/support/knowledgecenter/zosbasics/com.ibm.zos.znetwork/znetwork_6.htm
Mike Wawiorko
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Seymour J Metz
Sent: 25 October 2020 01:40
To:
Hello Kolusu,
Yes that is correct.
Below I have included my SORT statements that work for me.
The issue I had was that originally, I also had an OUTREC BUILD IFTHEN.
When that was present, I had an error with the record length of the TRACEIT
file.
I am copying the intermediate file (after INREC
Hello
Thank you.
What If the end user is using an SNA application without tso ? Can I still
use record 30 ?
On Mon, 26 Oct, 2020, 4:58 pm Allan Staller, wrote:
> Classification: Internal
>
> Type 30 subtype 4 or 5
>
> Will be generated for each TSO LOGON. Also SMF type 4, SMF type 5, could
>
Classification: Internal
Type 30 is generated at address space creation for all work.
This would not apply to (e.g. CICS logons). That information would be provided
by CICS.
CICS Would cut type 30's, but those would be for the CICS address space, not
the individual logons within the address
Classification: Internal
YES
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Jake Anderson
Sent: Monday, October 26, 2020 8:07 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SMF to capture user login history
[CAUTION: This Email is from outside the Organization.
Classification: Internal
Type 30 subtype 4 or 5
Will be generated for each TSO LOGON. Also SMF type 4, SMF type 5, could be
used as an alternative (if you still have them).
Parsing out the 1 section of the type 30 , subtype 4 or 5 is pretty trivial.
Althoulg variable in format, that section
Probably not, but more details would be necessary. "An SNA application" is a
pretty wide net.
APPC transactions are potentially recorded in SMF 30.
Charles
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Jake Anderson
Sent:
W dniu 26.10.2020 o 18:14, Charles Mills pisze:
No. The OP did not specify TSO (or any other subsystem). The OP wrote "I would like
to fetch a user's logon history like when he was logged with all time intervals."
I have no time to check it, so I may be wrong, but I believe every logon
cut
Thank you Sri.
This is helpful.
On Mon, Oct 26, 2020 at 1:10 PM Sri h Kolusu wrote:
> Cameron,
>
> OUTFIL is last on the list of processing. i.e
>
> INCLUDE
> INREC
> SORT
> OUTREC
> OUTFIL
>
>
> So your traceit will be printed after OUTREC. Ideally I would use an
> OVERLAY instead of BUILD,
No.
Charles
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Paul Gilmartin
Sent: Monday, October 26, 2020 8:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: SMF to capture user login history
On Mon, 26 Oct 2020 14:33:38 +, Allan
GTF
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of
Paul Gilmartin [000433f07816-dmarc-requ...@listserv.ua.edu]
Sent: Monday, October 26, 2020 11:53 AM
To:
Classification: Internal
I believe it does. However, the OP was asking about TSO. In that case, the
answer is definitely yes.
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
Paul Gilmartin
Sent: Monday, October 26, 2020 10:53 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Yes, and that may be the most reasonable way to go for some installations; the
devil is in the details.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of
Frank Swarbrick
Cameron,
OUTFIL is last on the list of processing. i.e
INCLUDE
INREC
SORT
OUTREC
OUTFIL
So your traceit will be printed after OUTREC. Ideally I would use an
OVERLAY instead of BUILD, so that I can see what exactly what was picked.
I optimized your control cards a bit so (clubbed multiple
A multiuser address space like CICS or Wylbur will not cut type 30 records for
users logging on and logging off.
--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
From: IBM Mainframe Discussion List [IBM-MAIN@LISTSERV.UA.EDU] on behalf of
Jake
No. The OP did not specify TSO (or any other subsystem). The OP wrote "I would
like to fetch a user's logon history like when he was logged with all time
intervals."
Charles
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Allan
If you are going beyond 2-3 simple rules you'll love NCA in ZOSMF once you get
it going.
Chances of getting what you want is minimal with more than half a dozen complex
rules if coding it manually.
Health Check proves you have valid syntax and lets you check your work.
Mike Wawiorko
Yes, obviously!
But ...no.
To explain: there is an option in RACF, called GRPLIST. Vast majority of
installations use GRPLIST, but few use NOGRPLIST.
1. YES
For NOGRPLIST you may belong to meny group, but only one connection at
the time is "active" - that means you logon as Frank, FRANK1
On Mon, 26 Oct 2020 14:33:38 +, Allan Staller wrote:
>
>Type 30 is generated at address space creation for all work.
>
Does that include OMVS fork()? Seems like overkill given that
some jobs may do copious forks.
Does ATTACH, which doesn't create an address space, get
logged likewise?
--
Is anyone using this to maintain AT-TLS policies or any other policies ?
Any views on NCA vs manual editing of the policy file ?
When I first encountered AT-TLS I used the Windows version to generate a simple
policy file for one type of application and thereafter did manual edits to the
Curious question. Is it possible to have a single user ID with different
privileges depending on what group you specify when logging in (to TSO, for
example)?
From: IBM Mainframe Discussion List on behalf of
Seymour J Metz
Sent: Sunday, October 25, 2020 8:05
37 matches
Mail list logo
