On Tuesday, 07/01/2008 at 12:29 EDT, Kris Buelens <[EMAIL PROTECTED]> 
wrote:
> Use'd define MAINT as a logonby user
>   RAC RDEFINE SURROGAT LOGONBY.MAINT
>   RAC PERMIT MAINT.LOGONBY CLASS(SURROGAT) ID(xxxx
> to define which users/groups can issue
>    LOGON MAINT BY  xxx  and give the pwsd of xxx
> 
> As to avoid RACF revoking users due to inactivity: XAUTOLOG them every 
now and 
> then.

As of z/VM 5.3, you can now remove a user's password entirely (ALTUSER 
NOPASSWORD).  This prevents revocation due to invalid password attempts. 
Preventing revocation due to inactivity is known in RACF terms as a 
"protected" user, support that is in z/OS, but not yet in z/VM.

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to