Re: Questions on issuing RACF LU command
An IBM colleague (from the UK) reverse engineered the RAC command as to avoid the creation of the A-disk file. It was named RACFAST. My former customer needed this as in the LOGON procedure a RAC LU was issued and some users didn't have a R/W A-disk. I applied some changes to it (support for RACF 1.10, allow a longer timeout period). I can send you that code, it never failed, but no warranty however. 2009/4/30 Boyer, William bil...@vips.com: I found this in RACF Security Server General User’s Guide (z/VM 5.3). Section 3.5 If you do not want the command output to be displayed to your terminal, enter the CMS command: globalv select $racgrp set $rac_ispf y If you do not want subsequent commands to overwrite the RACF DATA file, you can append the file (send the output you enter from all RACF commands you enter to the file) by entering the CMS command: globalv select $racgrp set $rac_apn y If you choose to have your output appended, the output is not displayed to your terminal. The RACF DATA file defaults to your disk or directory accessed as A unless specified otherwise by your installation. If you cannot find the file on your disk or directory accessed as A, check your other disks or directories. If you would like to have the output placed on your disk or directory accessed as B, enter the CMS command: globalv select $racgrp set $rac_fle b William Boyer Sr. Technical Support Specialist. x8419 From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Changer Sent: Thursday, April 30, 2009 5:44 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Questions on issuing RACF LU command Hi all, Issue 'RACF LU user' command will create RACF DATA file on 191 A disk by default. Is there any way to perform the command but would not generate RACF DATA file or create RACF DATA file on other disk (B , C ... or temporary disk) not 191 A disk? Thank you very much. Regards, Changer -- Kris Buelens, IBM Belgium, VM customer support
Re: Questions on issuing RACF LU command
Hi, As far as I can recall from the top of my head, without having access to the code, the RAC command writes the racf output to the RACF DATA A file and then, when not disabled, does a TYPE to display the racf output. What I normally do to process racf data, is the following: /* setup racf environment on top of CMS environment*/ 'RACFISPF' /* issue racf commands */ 'PIPE COMMAND' racf_command '| ' . /* close racf environment */ 'END' So, for instance the following code can put the data to a RACF DATA file on another filemode: 'RACFISPF' 'PIPE COMMAND' racf_command '| RACF DATA' fm 'END' Ronald van der Laan
Questions on issuing RACF LU command
Hi all, Issue 'RACF LU user' command will create RACF DATA file on 191 A disk by default. Is there any way to perform the command but would not generate RACF DATA file or create RACF DATA file on other disk (B , C ... or temporary disk) not 191 A disk? Thank you very much. Regards, Changer
Re: Questions on issuing RACF LU command
I apologize.. I could swear RAC did not create an output file - but I see now that it does. Wonder how I missed that all this time? Getting old sucks.. sorry for the misinfo :-( Scott On Thu, Apr 30, 2009 at 5:59 AM, Rob van der Heij rvdh...@gmail.com wrote: On Thu, Apr 30, 2009 at 1:46 PM, Scott Rohling scott.rohl...@gmail.com wrote: RAC LU userwill just display to the console.. You're incorrect. As Ronald says, It also (over)writes a file RACF DATA on the A-disk. That was the point raised by the OP. -Rob
Re: Questions on issuing RACF LU command
On Thu, Apr 30, 2009 at 1:46 PM, Scott Rohling scott.rohl...@gmail.com wrote: RAC LU user will just display to the console.. You're incorrect. As Ronald says, It also (over)writes a file RACF DATA on the A-disk. That was the point raised by the OP. -Rob
Re: Questions on issuing RACF LU command
On Thu, Apr 30, 2009 at 2:15 PM, Scott Rohling scott.rohl...@gmail.com wrote: I apologize.. I could swear RAC did not create an output file - but I see now that it does. Wonder how I missed that all this time? Getting old sucks.. sorry for the misinfo :-( We're just spoiled by most of CMS being so intuitive. RACF is pretty alien. -Rob
Re: Questions on issuing RACF LU command
Also take a look at the RACOUTP EXEC on the Y disk. When you use the RAC EXEC, RACF writes the output to RACF DATA, then calls RACOUTP EXEC to display it. If you look at the RACOUTP EXEC, you'll see that a global variable is set of the filemode where RACF DATA is written. There are also other global variables that you could set to suppress the console output. I'm not sure if you can override the output disk, but you could modify this exec to copy the output file to a different disk. I have experimented with modifying this exec to use pipe browse instead of just typing screens of output to the console. I inserted this code right before SET CMSTYPE HT before the ESTATE RACF DATA FM in the exec (line 48 on my system): 'PIPE state RACF DATA' fm, '| spec w6 1', /* Number of lines in the output */ '| var filines' If RC0 then /* The file doesn't exist */ Exit /* .. all done*/ output='console' /* Default to console */ /* Was RAC called from an exec or from the command line?*/ Call CSL 'DMSCALLR callrc callee 4' /* Check 4 levels back */ 'PIPE fullscrq', '| spec 21.2 c2d 1', /* Number of lines on the screen */ '| var scrlines' /* If RAC run from command line and large output, use pipe browse */ If filines = scrlines callrc0 then output='browse' 'PIPE RACF DATA' fm, '| strip trailing', '|' output Exit RC On Thu, Apr 30, 2009 at 8:15 AM, Scott Rohling scott.rohl...@gmail.com wrote: I apologize.. I could swear RAC did not create an output file - but I see now that it does. Wonder how I missed that all this time? Getting old sucks.. sorry for the misinfo :-( Scott On Thu, Apr 30, 2009 at 5:59 AM, Rob van der Heij rvdh...@gmail.com wrote: On Thu, Apr 30, 2009 at 1:46 PM, Scott Rohling scott.rohl...@gmail.com wrote: RAC LU user will just display to the console.. You're incorrect. As Ronald says, It also (over)writes a file RACF DATA on the A-disk. That was the point raised by the OP. -Rob -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY
Re: Questions on issuing RACF LU command
I found this in RACF Security Server General User's Guide (z/VM 5.3). Section 3.5 If you do not want the command output to be displayed to your terminal, enter the CMS command: globalv select $racgrp set $rac_ispf y If you do not want subsequent commands to overwrite the RACF DATA file, you can append the file (send the output you enter from all RACF commands you enter to the file) by entering the CMS command: globalv select $racgrp set $rac_apn y If you choose to have your output appended, the output is not displayed to your terminal. The RACF DATA file defaults to your disk or directory accessed as A unless specified otherwise by your installation. If you cannot find the file on your disk or directory accessed as A, check your other disks or directories. If you would like to have the output placed on your disk or directory accessed as B, enter the CMS command: globalv select $racgrp set $rac_fle b William Boyer Sr. Technical Support Specialist. x8419 From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of Changer Sent: Thursday, April 30, 2009 5:44 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Questions on issuing RACF LU command Hi all, Issue 'RACF LU user' command will create RACF DATA file on 191 A disk by default. Is there any way to perform the command but would not generate RACF DATA file or create RACF DATA file on other disk (B , C ... or temporary disk) not 191 A disk? Thank you very much. Regards, Changer
