This could be a helpful lik https://www.ibm.com/docs/en/zos/2.4.0?topic=migration-setting-up-security-ut ility-isfacr
Also this: https://www.ibm.com/docs/en/zos/2.5.0?topic=guide-racf-classes-profiles-that -protect-sdsf What I have run into is missing profile in RACF resource class SDSF And the loss of ICH408I messages. The SET SECTRACE works well in SDSF But my end users may forget to turn it off and create other issues. Lizette -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Rob Scott Sent: Monday, August 19, 2024 2:25 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ISFPRM backout The original APAR was PH49811. Worth making sure you have all the up to date manuals as well. Note that the old ISFACR is not a onestop migration tool. It provides sample RACF commands and they should not be run asis. If you use NTBL and NTBLENT to control sysout authority and group membership then ISFNTCNV is probably going to be more useful. We also supply ISFRACEX in SISFJCL that is a starter set of SDSF class profiles for a nice simple setup. There is also a SDSF security presentation on the IBM education github and several discussions on this forum over the last few years. Rob Scott Rocket Software Get Outlook for Android<https://aka.ms/AAb9ysg> ________________________________ From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> on behalf of Peter <000005e4a8a0a03d-dmarc-requ...@listserv.ua.edu> Sent: Monday, August 19, 2024 5:44:37 AM To: IBM-MAIN@LISTSERV.UA.EDU <IBM-MAIN@LISTSERV.UA.EDU> Subject: Re: ISFPRM backout EXTERNAL EMAIL Hello Rob We are in zOS 2.4 and I don't see the the utility ISFNTCNV. Can I bring this utility externally and run it ? On Sun, 18 Aug 2024, 23:30 Rob Scott, < 00000618c90e6fdf-dmarc-requ...@listserv.ua.edu> wrote: > On z/OS 2 4 and below SDSF always checks SAF first and only uses > ISFPRMxx statements when it gets RC=4. > > So deleting the problematic SAF profile will revert behaviour. > > We also supply some alternatives to the old ISFACR tool that make > things easier for some customers, for example the ISFNTCNV tool. > > Rob Scott > Rocket Software > > Get Outlook for > Android<https://aka.ms/AAb9ysg<https://aka.ms/AAb9ysg>> > ________________________________ > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> on > behalf of Peter <000005e4a8a0a03d-dmarc-requ...@listserv.ua.edu> > Sent: Sunday, August 18, 2024 6:28:43 AM > To: IBM-MAIN@LISTSERV.UA.EDU <IBM-MAIN@LISTSERV.UA.EDU> > Subject: ISFPRM backout > > EXTERNAL EMAIL > > > > > > Hello > > Good evening > > I am trying to migrate ISFPRM to RACF. > > So incase if something goes wrong with RACF profile. Is there a way to > fall back to ISFPRMxx ? > > Cause I am selecting only SDSF as a migraine option under ISFACR and > don't want to disturb other profiles like OPERCMD or CONSOLE etc > > Peter > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > ================================ > Rocket Software, Inc. and subsidiaries ? 77 Fourth Avenue, Waltham MA > 02451 > <https://www.google.com/maps/search/77+Fourth+Avenue,+Waltham+MA+02451 > ?entry=gmail&source=g<https://www.google.com/maps/search/77+Fourth+Ave > nue,+Waltham+MA+02451?entry=gmail&source=g>> > ? Main Office Toll Free Number: +1 855.577.4323 Contact Customer > Support: > https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport<https://m > y.rocketsoftware.com/RocketCommunity/RCEmailSupport> > Unsubscribe from Marketing Messages/Manage Your Subscription > Preferences - > http://www.rocketsoftware.com/manage-your-email-preferences<http://www > .rocketsoftware.com/manage-your-email-preferences> > Privacy Policy - > http://www.rocketsoftware.com/company/legal/privacy-policy<http://www. > rocketsoftware.com/company/legal/privacy-policy> > ================================ > > This communication and any attachments may contain confidential > information of Rocket Software, Inc. All unauthorized use, disclosure > or distribution is prohibited. If you are not the intended recipient, > please notify Rocket Software immediately and destroy all copies of > this communication. Thank you. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ================================ Rocket Software, Inc. and subsidiaries ? 77 Fourth Avenue, Waltham MA 02451 ? Main Office Toll Free Number: +1 855.577.4323 Contact Customer Support: https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - http://www.rocketsoftware.com/manage-your-email-preferences Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy ================================ This communication and any attachments may contain confidential information of Rocket Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please notify Rocket Software immediately and destroy all copies of this communication. Thank you. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
