Generic profiles had become a standard here years before we cloned the first RACF data base. Went so far as to create a still existing usermod to the RACF ISPF app that inserts 'Generic' on the main data set profile panels. One would have to go out of the way to create a discrete profile. I saw a few over the years, but only a handful of dogies.
A discrete profile would be very problematic with a cloned data base. They are recognized only by a flag in the VTOC. With generics, cloning is not a major effort. BTW, as far as eventual cleanup of unnecessary profile, it doesn't really matter very much. What you need to do is make sure that a commonly named resource A.B.C has the appropriate access rules in both data bases. That matters. . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-543-6132 Office ⇐=== NEW robin...@sce.com -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Sankaranarayanan, Vignesh Sent: Friday, May 18, 2018 8:44 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: [EXTERNAL] Re: RACF on a Sysplex?? Hi Skip, Any scars from not doing so? – Vignesh Mainframe Infrastructure -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jesse 1 Robinson Sent: Saturday 19-May-2018 03:17 To: IBM-MAIN@LISTSERV.UA.EDU Subject: [EXTERNAL] Re: RACF on a Sysplex?? One sort of obvious point. Before cloning your RACF data base make sure that *all* data set profiles are generic. Convert any that are not. . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-543-6132 Office ⇐=== NEW robin...@sce.com -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Zelden Sent: Thursday, May 03, 2018 3:45 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: (External):Re: RACF on a Sysplex?? My client has a mixture of things, but nothing is ever shared with a sandbox LPAR - not even via RRSF "one way". It really doesn't seem dangerous to do it one way, but I still prefer to isolate things in a sandbox as completely as possible. One business unit with 2 large sysplexes has separate RACF databases, but RRSF keeps things in sync. Both have sysplex communications enabled in the DSNT and CF structures. Another business unit has one RACF database shared between 2 sysplexes. MII is the integrity manager and SYSZRACF is excluded, so the DB is protected with RESERVEs. Another business unit has a 2 system basic sysplex and is in GRS ring mode, RACF DB is shared between both. I just checked and SYSZRACF is converted to a global ENQ. Another business unit has a prod / devl LPAR (both monoplexes). They share a RACF DB. Since there is no GRS ring, the DB is protected with RESERVE. There is a sandbox version of this business unit also, but it has its own RACF DB. There are also 2 sandbox parallel sysplexes each with 2 LPARs that are "clones" of the first 2 environments I wrote about - one with GRS, the other with MII. Both those sysplexes have their own RACF DBs, have sysplex communications enabled in the DSNT and CF structures. Regards, Mark -- Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS ITIL v3 Foundation Certified mailto:m...@mzelden.com Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html Systems Programming expert at http://search390.techtarget.com/ateExperts/ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
