So what better place to keep and secure "sensitive" data than RACF
itself... 

Eric Spencer 

> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> Behalf Of Hal Merritt
> Sent: Wednesday, August 26, 2009 10:11 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: WHOIS
> 
> True.
> 
> Once upon a time, ID's and associated names were not considered
sensitive
> data. Nowadays, many shops have to protect that data and thus the
profile.
> 
> 
> 
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> Behalf Of Tony B.
> Sent: Wednesday, August 26, 2009 10:07 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: WHOIS
> 
> But then the user must have admin scope (or IRR.LISTUSER profile) over
the
> user to be listed.
> 
> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> Behalf
> Of Eric Spencer
> Sent: Wednesday, August 26, 2009 10:03 AM
> To: IBM-MAIN@bama.ua.edu
> Subject: Re: WHOIS
> 
> We use the ListUser command to list the RACF profile.
> This way there is no "external" database to keep in sync with RACF.
> 
> Here is a small example:
> 
> /*REXX*/
> parse upper arg ruserid
> 
> /*trace ?I */
> x= Outtrap("lu.",'*',"noconcat") /* Trap the output */
> /* Issue the lu command */
> ADDRESS "TSO" "LU "ruserid
> x = outtrap("OFF");
> 
> IF (POS("NAME=",lu.1) > 0) THEN
>   name = substr(lu.1,POS("NAME=",lu.1)+5,22);
> 
> say name
> 
> return
> 
> Eric Spencer
> Product Author
> Neon Enterprise Software
> espen...@neon.com
> 
> 
> > -----Original Message-----
> > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> > Behalf Of Tony B.
> > Sent: Wednesday, August 26, 2009 9:36 AM
> > To: IBM-MAIN@bama.ua.edu
> > Subject: Re: WHOIS
> >
> > Years ago in a small shop with no RACF add on tools were faced with
> the
> > same
> > challenge.  Various support groups knew the user profile but wanted
to
> > look
> > up the name.  No doubt many various apps were developed over the
years
> to
> > read the RACF type 0200 record, or some derivation of it.
> >
> > Being the lazy type we used Quickref and defined our "ID/name"
dataset
> as
> > a
> > "user defined message database" (that's as close as I can remember
the
> > actual term from Chicago Soft).
> >
> > Anyway, once defined as a QW database our "ID/name" dataset behaved
> like
> > any
> > MVS message, position the cursor over the user id and type in QW.
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On
> > Behalf
> > Of Duane Shields
> > Sent: Wednesday, August 26, 2009 9:14 AM
> > To: IBM-MAIN@bama.ua.edu
> > Subject: Re: WHOIS
> >
> > Attached, is the WHOIS PROC that we use.  It works for both 6 & 7
> > character
> > User IDs.  That is as long as the referenced data set is kept
> up-to-date.
> >
> > Hope this helps,
> >
> > Duane
> >
> >
> >
> >
> > On Tue, 25 Aug 2009 15:37:17 -0500, gsg <gsg_...@yahoo.com> wrote:
> >
> > >Does anyone use the WHOIS proc that you can provides a users name
> that
> > >is associated with a USERID?  The command that we use is 'TSO WHOIS
> > userid'.
> > >I think that it was written for a 7 character userid, but we have
> some
> > >that
> > are
> > >6 characters.  Was wondering if anyone ever fixed this or if anyone
> has
> > >something similar.
> > >
> > >TIA
> > >
> >
>
>----------------------------------------------------------------------
> > >For IBM-MAIN subscribe / signoff / archive access instructions,
send
> > >email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> > >Search the archives at http://bama.ua.edu/archives/ibm-main.html
> >
> >
> >
----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> email
> > to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search
the
> > archives at http://bama.ua.edu/archives/ibm-main.html
> >
> > No virus found in this incoming message.
> > Checked by AVG - www.avg.com
> > Version: 8.5.409 / Virus Database: 270.13.67/2326 - Release Date:
> 08/25/09
> > 18:07:00
> >
> >
----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@bama.ua.edu with the message: GET IBM-MAIN
INFO
> > Search the archives at http://bama.ua.edu/archives/ibm-main.html
> 
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
> No virus found in this incoming message.
> Checked by AVG - www.avg.com
> Version: 8.5.409 / Virus Database: 270.13.67/2326 - Release Date:
08/25/09
> 18:07:00
> 
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
> NOTICE: This electronic mail message and any files transmitted with it
are
> intended
> exclusively for the individual or entity to which it is addressed. The
> message,
> together with any attachment, may contain confidential and/or
privileged
> information.
> Any unauthorized review, use, printing, saving, copying, disclosure or
> distribution
> is strictly prohibited. If you have received this message in error,
please
> immediately advise the sender by reply email and delete all copies.
> 
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to