My client has a mixture of things, but nothing is ever shared with a sandbox LPAR - not even via RRSF "one way". It really doesn't seem dangerous to do it one way, but I still prefer to isolate things in a sandbox as completely as possible.
One business unit with 2 large sysplexes has separate RACF databases, but RRSF keeps things in sync. Both have sysplex communications enabled in the DSNT and CF structures. Another business unit has one RACF database shared between 2 sysplexes. MII is the integrity manager and SYSZRACF is excluded, so the DB is protected with RESERVEs. Another business unit has a 2 system basic sysplex and is in GRS ring mode, RACF DB is shared between both. I just checked and SYSZRACF is converted to a global ENQ. Another business unit has a prod / devl LPAR (both monoplexes). They share a RACF DB. Since there is no GRS ring, the DB is protected with RESERVE. There is a sandbox version of this business unit also, but it has its own RACF DB. There are also 2 sandbox parallel sysplexes each with 2 LPARs that are "clones" of the first 2 environments I wrote about - one with GRS, the other with MII. Both those sysplexes have their own RACF DBs, have sysplex communications enabled in the DSNT and CF structures. Regards, Mark -- Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS ITIL v3 Foundation Certified mailto:m...@mzelden.com Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html Systems Programming expert at http://search390.techtarget.com/ateExperts/ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
