> -----Original Message-----
> From: IBM Mainframe Discussion List 
> [mailto:[EMAIL PROTECTED] On Behalf Of Jacky Bright
> Sent: Monday, February 12, 2007 11:43 AM
> To: IBM-MAIN@BAMA.UA.EDU
> Subject: Re: RACF Surrogate Authority
> 
> Only in batch environment ??
> 
> How am I going to hold XYZ user responsible for his activities in case
> surrogate userid is being used ?
> 
> In case XYZ is submitting job then in spool or in syslog we 
> will get name of
> the submitter as XYZ and not ABC.
> 
> JAcky

Most of the RACF SMF records will record the actual ID which submitted
the job as well as the id under which it ran. For example, in the JOB
INITIATION record produced by IRRADU00, there is the field
INIT_UTK_SUSER_ID, which is the actual RACF ID of the person which
submitted the job, not the surrogate id.

--
John McKown
Senior Systems Programmer
HealthMarkets
Keeping the Promise of Affordable Coverage
Administrative Services Group
Information Technology

The information contained in this e-mail message may be privileged
and/or confidential.  It is for intended addressee(s) only.  If you are
not the intended recipient, you are hereby notified that any disclosure,
reproduction, distribution or other use of this communication is
strictly prohibited and could, in certain circumstances, be a criminal
offense.  If you have received this e-mail in error, please notify the
sender by reply and delete this message without copying or disclosing
it. 

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to