IBM GC28-1920-01 prefix, a value, specify with the PREFIX keyword, sysname, the system, either

Page 52

prefix

Is

a value

you

specify with the PREFIX keyword

on

the

 

TARGET

command

 

 

 

 

sysname

Is

the system

name. This name must match the value

in

th

 

CVTSNAME

field for the system it identifies.

 

 

ds_identity

Is

either

INMSG

or OUTMSG

 

 

The naming convention for the workspace data sets for remote connections

prefix.local_luname.remote_luname.ds_identity

where:

prefixIs a value you specify with the PREFIX keyword on the TARGET command

local_luname Is the LU name of the local node

remote_luname

Is

the LU name of the remote node

 

 

ds_identity

Is

either INMSG

or

OUTMSG

 

 

 

If

your

installation

has

configured

an

RRSF network,

you could

lose req

are in your existing workspace data sets when you

install multisystem R

support. To

 

avoid

losing

requests,

follow

these steps

before

you install

RRSF

node

support

on

a

system

in

an

RRSF network:

 

 

1.Warn users of this migration. Start this process at a time appropri installation. Pay particular attention to the effects of locking the R database (step 3). Updates to a locked RACF database are not all result in ABEND483 or ABEND485. SeeOS/390 Security Server (RACF)

System Programmer's Guidefor information on locking a database.

2. On

the system on which

you are

installing

multisystem

node support,

TARGET

DORMANT

commands

for

all

remote

nodes,

and wait

until

their

INMSG workspace data sets have drained. You can use

a

TARGET

LIST

command

for

each

specific

remote

node to

verify

that

the

INMSG fi

As

a

result

of

this

step:

 

 

 

 

 

 

 

ŸFuture requests from remote nodes are not received. They queue

OUTMSG files for this system on the remote nodes.

Ÿ Pending requests from remote nodes are processed before you loc RACF database.

3.Use the IRRUT400 utility to lock the RACF database. Specify PARM='LOCKINPUT' with no OUTDD statements in the JCL. The utility gives return code of 4, but locks the database. Locking the database pr

database from getting

out of synchronization with other RACF databas

RRSF network during the

install.

It is important to completely finish step 2 before locking the dat Otherwise, pending update requests already received from remote no result in abends, and could cause the out-of-sync condition that thi attempting to prevent.

4.Install RACF.

5.Stop the RACF subsystem address space.

If the INMSG and OUTMSG workspace data sets are empty at this tim workspace data sets can be allocated that follow the new naming con You can preallocate these data sets, or let RACF allocate them for

28 OS/390 V1R2.0 Security Server (RACF) Planning: Installation and Migration

Image 52
Contents OS/390 Security Server RACF Planning Installation and MigrationPlace graphic in this area. Outline is keyline only. DO NOT PRINT Page Security Server RACF Planning Installation and Migration Second Edition, September 1996. AllPage Page Contents MigrationCustomization Considerations Administration ConsiderationsAuditing Considerations Operational Considerations IndexChapter 10. ApplicationPage Figures Page Notices Trademarks How to Use This About This BookWho Should Use This Book xiiiWhere to Find More Information Softcopy PublicationsŸ The OS/390 Security Server RACF Information , PackageSK2T-2180 ServerAdministration, H3927 Elements of Security RACF Installation - Student GG24-3971NotesUsing the Ÿ Tutorial Options for Tuning GG22RACFOther Sources of Information IBM Discussion AreasInternet Sources listserv@uga.cc.uga.eduPublications To Request Copies ofxviii OS/390Features ServiceŸ OpenEdition ProductOSA/SF V2R5TSO/EPage Summary of Changes Page Chapter 1. Planning Migration Planning ConsiderationsMigration Administration Considerations Installation ConsiderationsCustomization Considerations Auditing Considerations Operational ConsiderationsApplication Development Considerations General User ConsiderationsPage Chapter 2. Release Overview New and Enhanced SupportOS/390 OpenEdition DCE identifiesfunction introduced in OS/390 ReleaseConcepts CheckAuthorizing and Auditing Server Access to the CCS and WLM Services Auditing the Passing of Access RightsOS/390 OpenEdition SOMobjects for MVSMultisystem Nodes RRSF Networknon-main systemsYear OS/390 Enable and Disable FunctionsTARGET NetView 1.10classes FacilityFunction Not Upgraded updated foridentifies function thatComponents for Release3. Summary of Class Descriptor Table CDTCommands lists classeswhich thereCommand Chapter 3. Summary of Changes to RACF Components for OS/390 15ReleaseData Areas Exitslists changed general-use programming interface GUPI data areMacros MessagesFigure 12 lists changes RACF macrosNew Messages Changed MessagesMessages RACF Database Split/Merge Utility IRRUT400Panels Publications LibraryRoutines Figure 13 lists RACF panels that areSYS1.SAMPLIB TemplatesFigure 16 identifies changes to RACF members of SYS1.SAMPLIB RACROUTE REQUEST=EXTRACTFigure 18 lists changes to RACF utilities for OS/390 Release UtilitiesTemplate Utility 0280OS/390 Security Server RACF Planning Installation and forMigration RACF Planning Installation and Migrationfor RACFChapter 4. Planning Considerations Migration StrategyRACF Planning Installation and Migrationfor RACF 2.1, and Hardware RequirementsSoftware Requirements RACF Migration and Planning for RACFCompatibility Considerations for Remote Sharing CompatibilityRequirements Page Chapter 5. Installation Considerations Enabling RACFConsiderations Networksinstallation configuredare in your existing workspace data sets when you install multisystem RChapter 5. Installation Considerations29 mustprefix nodenamesysname local-luprefix.local-node.local-node .INMSG RACF Storage Considerations Virtual StorageThis section discusses storage considerations for RACF Figure 21 estimates RACF virtual storage usage, for planning purposesCustomer Additions to the CDT SubpoolTemplates for RACF on OS/390 Releaseinformation, OS/390see Security Server SystemChapter 6. Customization Considerations Exit Processingand IRRSXT00 Effects of OS/390 OpenEdition DCEIRRSXT00 Installation Exit RACROUTE REQUEST=DEFINE Preprocessing Exit ICHRDX01Chapter 7. Administration Considerations Server RACF Security Administrators. GuideCross-Linking Between RACF Users signonSignon to DCEUUIDS ClassActivating OS/390 OpenEdition DCE Application Considerations single signon restrictionsOpenEditionsee DCE Administration .Guidethe DCE Encryption Key Library Reference OpenEdition Planning, and inOS/390 OpenEdition Programming AssemblerThreads and Restrictions Changes to RACF Authorization Processingcallable servicepthread orsecuritynp Utility Rdceruid Callable ServiceEnhancements to the Chapter 7. Administration Considerations43 SYSMVIEWPage Chapter 8. Auditing Considerations SMF RecordsAuditors Guide and OS/390 Server RACF MacrosAuditing New OS/390 ServicesInterfaces Auditing OS/390 OpenEdition DCE Support Auditing SystemView for MVS SupportReport Writer SMF Data Unload UtilityPage Command OS/390 Security Server RACF Command Language Referencefor moreChapter 9. Operational Considerations Enabling and DisablingPage Chapter 10. Application Development Considerations 2000 SupportServers 01yydddFNew Application Services and Security pthread the securitynpService New Application AuthorizationChanges to the Class Descriptor Table Programming InterfacesŸ “Macros” on page Ÿ “Templates” on page Ÿ “Utilities” on page Ÿ “Routines” on pageChapter 11. General User ConsiderationsOpenEdition Reference forPage Chapter 12. NJE Considerations APAR OW14451OW08457 After Applying the PTFActions Required OW08457UACC NODESGROUP APAR OW15408FAILSAFE Page Chapter 13. Scenarios Migrating an ExistingNodes RRSFprefixTARGET NODEMIAMI2 SYSNAMESYSTEM2 LOCAL OPERATIVE On MIAMI2prefixTARGET NODEORLANDO DELETE prefixTARGET NODEMIAMI2 DELETEOn ORLANDO RACF DiagnosisDELETE prefixTARGET NODEORLANDO OPERATIVE PREFIX... PROTOCOL... WORKSPACE Note Theaccess Glossarydirection Page Seeinventory Seegeneral-use programmingprogramming Seelogical Seemultisystemlogical other.single-system supervisorytask segment andDFP Index A classes continuedcontinued Page SFSCMD SERVERKEYSMSTR utilitiescontinued Page Now you can! TheIBM Online Library Productivity IBM Edition OS/390 Security Server RACF Information Page Page Communicating Your Comments to IBM commentsReaders Comments - Wed Like to Hear from You OS/390 Security Server RACF Planning Installation and MigrationPublication No. GC28-1920-01 Note CopiesMAIL REPLYBUSINESS IBMPage Drop in Back Cover Image Here IBMGC28-192ð-ð1