One sort of obvious point. Before cloning your RACF data base make sure that 
*all* data set profiles are generic. Convert any that are not.

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-543-6132 Office ⇐=== NEW
robin...@sce.com


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Mark Zelden
Sent: Thursday, May 03, 2018 3:45 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: RACF on a Sysplex??

My client has a mixture of things, but nothing is ever shared with a sandbox 
LPAR - not even
via RRSF "one way".   It really doesn't seem dangerous to do it one way, but I 
still
prefer to isolate things in a sandbox as completely as possible.  

One business unit with 2 large sysplexes has separate RACF databases, but RRSF 
keeps things in sync.  Both have sysplex communications enabled in the DSNT and 
CF structures.  

Another business unit has one RACF database shared between 2 sysplexes.  MII is 
the integrity manager and SYSZRACF is excluded, so the DB is protected with 
RESERVEs.

Another business unit has a 2 system basic sysplex and is in GRS ring mode, 
RACF DB is shared between both.  I just checked and SYSZRACF is converted to a 
global ENQ. 

Another business unit has a prod / devl LPAR (both monoplexes).  They share a 
RACF
DB.  Since there is no GRS ring, the DB is protected with RESERVE.   There is a 
sandbox
version of this business unit also, but it has its own RACF DB.   

There are also 2 sandbox parallel sysplexes each with 2 LPARs that are "clones" 
of the first 2 environments I wrote about - one with GRS, the other with MII. 
Both those sysplexes have their own RACF DBs, have sysplex communications 
enabled in the DSNT
and CF structures.    

Regards,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS ITIL v3 
Foundation Certified mailto:m...@mzelden.com Mark's MVS Utilities: 
http://www.mzelden.com/mvsutil.html
Systems Programming expert at http://search390.techtarget.com/ateExperts/


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to