Re: User written checks for IBM health checker

[Walt Farrell]

On Sun, 10 Jun 2012 12:04:51 +0300, John s justfor...@gmail.com wrote:

I am trying to write checks(user) in IBM health checker using SYSREXX.I
have gone through the sample -HZSSXCHK.This sample just outlines the
skeleton for writing the user checks.

My question is ...lets say for example if I want to rewrite
CHECK(IBMRACF,RACF_IBMUSER_REVOKED) ,how would I go about it.

What code IBM would have put or should be written between HZSLSTRT() and
HZSLSTOP() to accomplish the above check.

May be I am thinking stupid-

1.Issue TSO LU for IBMUSER ,capture the output of this command into some
variable and decide on whether the user ID is really revoked.This is really
cumbersome if we think of some complex checks.

The output of LU is not a intended programming interface. If you wanted to 
examine a user ID, from REXX, you should use the functions provided by 
IRRXUTIL. See 
http://publibz.boulder.ibm.com/cgi-bin/bookmgr/BOOKS/ICHZA3C0/14.0?SHELF=ez2zo111DT=20110620175100
 or http://preview.tinyurl.com/6q8ecue for more information.

-- 
Walt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: User written checks for IBM health checker

[Peter Relson]

Please do not write a check pretending to be someone else. IBM owns the 
IBMRACF checks.  If you want to write a check that does something to meet 
your needs, then by all means do so, but name it accordingly.

As to what you check, or what interfaces you use to accomplish that, that 
is up to you. You can use any facilities made available through system 
REXX. I will not comment on how RACF accomplishes the check in question 
(in part because I don't know, but just as important because I have no 
idea if there are programming interfaces available to do what it does). 

If you think the check should behave differently, please consider sharing 
your thoughts with the RACF team so that they can consider a change or an 
enhancement.

Peter Relson
z/OS Core Technology Design

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN