IBM GC28-1920-01 manual continued

Page 98

DCE support

(continued)

 

 

 

 

 

 

G

 

 

 

 

 

 

 

 

 

 

 

auditing

 

considerations

47

 

 

 

 

 

user

 

considerations

 

command

changes

 

15

 

 

 

 

 

 

 

 

general

 

 

 

 

 

 

 

 

 

 

 

migration

3

 

 

 

 

 

 

controlling

access

to

R_dceruid

 

 

 

 

 

 

 

 

 

callable service

42

 

 

 

 

 

 

 

DCEUUIDS

class

 

13

 

 

 

 

 

 

 

GINFOMAN class 11, 14, 53

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

deleting RACF user IDs 42

 

 

 

H

 

 

 

 

 

 

 

 

 

 

 

description

 

6

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

effect

on

exits

35,

36

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

hardware

requirements

 

 

 

general

user

considerations

55

 

 

 

 

 

 

 

planning

 

considerations

24

 

KEYSMSTR

class

14

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

new

audit

function

 

codes

16

 

 

 

 

 

 

 

 

 

 

 

 

 

 

new

record

 

type

for

database

unload utility

22

 

 

 

 

 

 

 

 

 

new

segment

 

for

user

template

21

I

 

 

 

 

 

 

 

 

 

 

 

 

ICHDSM00

utility

 

 

 

 

 

 

RACF

remove

ID

 

utility

22

 

 

 

 

 

 

 

 

 

 

 

 

 

new

return

 

code

22

 

 

SMF

record

changes

 

46

 

 

 

 

 

 

 

 

 

 

 

 

 

 

ICHEINTY macro, changes to 17

 

user

passwords

 

55

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

ICHRCX01

exit

17,

35

 

 

 

DCEUUIDS

class

13

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

ICHRCX02

exit

35

 

 

 

 

 

DIRECTRY

class

11,

13,

17

 

 

 

 

 

 

 

 

 

 

 

ICHRDX01

 

exit

17,

36

 

 

disabling

RACF

10,

 

49

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

ICHRSMF0

utility

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

E

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

new

return

 

code

22

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

INFOMAN

class

11,

14,

53

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Information Management,

support for 11

ECSA

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

installation

considerations

27

 

storage

 

requirement

 

33

 

 

 

 

 

 

 

 

 

 

 

CDT

 

(class

descriptor

table)

33

ELSQA

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

enabling

RACF

27

 

 

 

 

 

storage

 

requirement

 

33

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

templates

34

 

 

 

 

 

enabling

RACF 10,

49

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

installation

exits

 

 

 

 

 

installation

considerations

27

 

 

 

 

 

 

 

 

 

See exits

 

 

 

 

 

 

 

EPLPA

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRRADU00

 

utility

 

 

 

 

 

storage

 

requirement

 

32

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

auditing

considerations

47

 

ESQA

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

changes

to

 

22

 

 

 

 

 

storage

 

requirement

 

32

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRRADULD member of SYS1.SAMPLIB 20

event

codes,

new

 

for

SMF

records

45

 

IRRADUTB

member

of

SYS1.SAMPLIB

20

exits

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRRBRW00

 

utility

 

 

 

 

 

changes

to

16

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

new

return

 

code

22

 

 

ICHRCX01

 

17

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRRDBU00

utility

22

 

 

 

ICHRCX01

 

and

ICHRCX02

35

 

 

 

 

 

 

 

 

 

 

changes

to

 

22

 

 

 

 

 

ICHRCX02

 

17

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

new

return

 

code

22

 

 

ICHRDX01

 

17, 36

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRRDCR00

module 10,

19,

51

 

IRRSXT00

 

17, 36

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRRDPI00

 

utility

 

 

 

 

 

migration

 

considerations

35

 

 

 

 

 

 

 

 

 

 

 

 

 

new

return

 

code

22

 

 

RACROUTE

REQ=AUTH

exits

35

 

 

 

 

 

 

 

 

 

IRRRID00

utility

 

 

 

 

 

RACROUTE

REQUEST=AUTH

 

postprocessing

17

 

 

 

 

 

 

DCE

 

considerations

42

 

 

RACROUTE

REQUEST=AUTH

 

preprocessing

17

 

 

 

 

DCE

 

support

 

22

 

 

 

 

 

RACROUTE

REQUEST=DEFINE

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

new

return

 

code

22

 

 

preprocessing

 

17, 36

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRRSXT00

exit

17,

 

36

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

F

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRRUT100

utility

22

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

new

return

 

code

22

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

support

for

FILE

and

DIRECTRY

profiles 11

FILE

class

11,

14,

 

17

 

 

 

 

 

 

 

 

 

 

 

IRRUT200

 

utility

 

 

 

 

 

FLPA

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

new

return

 

code

22

 

 

storage

 

requirement

 

32

 

 

 

 

 

 

 

 

 

 

 

 

 

IRRUT400

 

utility

 

 

 

 

 

function

not

upgraded

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

new

return

 

code

22

 

 

report

writer

function

12

 

 

 

 

 

 

 

 

 

ISPF

panels

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

changed

19

 

 

 

 

 

74 OS/390 V1R2.0 Security Server (RACF) Planning: Installation and Migration

Image 98
Contents Place graphic in this area. Outline is keyline only. DO NOT PRINT Security Server RACF Planning Installation and MigrationOS/390 Page Security Server RACF Planning Installation and Migration Second Edition, September 1996. AllPage Page Contents MigrationAuditing Considerations Administration ConsiderationsCustomization Considerations Chapter Operational ConsiderationsIndex 10. ApplicationPage Figures Page Notices Trademarks Who Should Use This Book How to Use ThisAbout This Book xiiiŸ The OS/390 Security Server RACF Information , PackageSK2T-2180 Where to Find More InformationSoftcopy Publications ServerUsing the Administration, H3927Elements of Security RACF Installation - Student GG24-3971Notes Ÿ Tutorial Options for Tuning GG22RACFInternet Sources Other Sources of InformationIBM Discussion Areas listserv@uga.cc.uga.eduPublications To Request Copies ofFeatures OS/390xviii OSA/SF ServiceŸ OpenEditionProduct V2R5TSO/EPage Summary of Changes Page Migration Migration Planning ConsiderationsChapter 1. Planning Customization Considerations Installation ConsiderationsAdministration Considerations Application Development Considerations Auditing ConsiderationsOperational Considerations General User ConsiderationsPage Chapter 2. Release Overview New and Enhanced Supportfunction OS/390 OpenEdition DCEidentifies introduced in OS/390 ReleaseConcepts CheckOS/390 OpenEdition Authorizing and Auditing Server Access to the CCS and WLM ServicesAuditing the Passing of Access Rights SOMobjects for MVSnon-main Multisystem NodesRRSF Network systemsTARGET OS/390 Enable and Disable FunctionsYear classes NetView1.10 Facilityidentifies function Function Not Upgradedupdated for that3. Summary of Components forRelease Class Descriptor Table CDTwhich Commandslists classes thereCommand Chapter 3. Summary of Changes to RACF Components for OS/390 15Releaselists changed Data AreasExits general-use programming interface GUPI data areFigure 12 lists changes MacrosMessages RACF macrosMessages New MessagesChanged Messages RACF Database Split/Merge Utility IRRUT400Routines PanelsPublications Library Figure 13 lists RACF panels that areFigure 16 identifies changes to RACF members of SYS1.SAMPLIB SYS1.SAMPLIBTemplates RACROUTE REQUEST=EXTRACTTemplate UtilitiesFigure 18 lists changes to RACF utilities for OS/390 Release Utility 0280Chapter 4. Planning Considerations OS/390 Security Server RACF Planning Installation and forMigrationRACF Planning Installation and Migrationfor RACF Migration StrategySoftware Requirements RACF Planning Installation and Migrationfor RACF 2.1, andHardware Requirements RACF Migration and Planning for RACFRequirements CompatibilityCompatibility Considerations for Remote Sharing Page Considerations Chapter 5. Installation ConsiderationsEnabling RACF Networksare in your existing workspace data sets when you installationconfigured install multisystem RChapter 5. Installation Considerations29 mustsysname prefixnodename local-luprefix.local-node.local-node .INMSG This section discusses storage considerations for RACF RACF Storage ConsiderationsVirtual Storage Figure 21 estimates RACF virtual storage usage, for planning purposesCustomer Additions to the CDT Subpoolinformation, OS/390see Security Server Templates for RACF onOS/390 Release Systemand IRRSXT00 Chapter 6. Customization ConsiderationsExit Processing Effects of OS/390 OpenEdition DCEIRRSXT00 Installation Exit RACROUTE REQUEST=DEFINE Preprocessing Exit ICHRDX01Cross-Linking Between RACF Users Chapter 7. Administration ConsiderationsServer RACF Security Administrators. Guide signonActivating DCEUUIDS ClassSignon to the DCE Encryption Key single signon restrictionsOpenEditionsee DCE Administration .GuideOS/390 OpenEdition DCE Application Considerations Threads and OpenEdition Planning, and inOS/390 OpenEdition Programming AssemblerLibrary Reference callable servicepthread orsecuritynp Changes to RACF Authorization ProcessingRestrictions Enhancements to the Rdceruid Callable ServiceUtility Chapter 7. Administration Considerations43 SYSMVIEWPage Auditors Guide and OS/390 Chapter 8. Auditing ConsiderationsSMF Records Server RACF MacrosInterfaces ServicesAuditing New OS/390 Report Writer Auditing OS/390 OpenEdition DCE SupportAuditing SystemView for MVS Support SMF Data Unload UtilityPage Chapter 9. Operational Considerations CommandOS/390 Security Server RACF Command Language Referencefor more Enabling and DisablingPage Servers Chapter 10. Application Development Considerations2000 Support 01yydddFNew Application Services and Security pthread the securitynpChanges to the Class Descriptor Table ServiceNew Application Authorization Programming InterfacesŸ “Macros” on page Ÿ “Templates” on page Ÿ “Utilities” on page Ÿ “Routines” on pageOpenEdition Chapter 11. General UserConsiderations Reference forPage OW08457 Chapter 12. NJE ConsiderationsAPAR OW14451 After Applying the PTFUACC Actions RequiredOW08457 NODESFAILSAFE APAR OW15408GROUP Page Nodes Chapter 13. ScenariosMigrating an Existing RRSFprefixTARGET NODEORLANDO DELETE prefixTARGET NODEMIAMI2 SYSNAMESYSTEM2 LOCAL OPERATIVEOn MIAMI2 prefixTARGET NODEMIAMI2 DELETEDELETE RACF DiagnosisOn ORLANDO prefixTARGET NODEORLANDO OPERATIVE PREFIX... PROTOCOL... WORKSPACE Note Thedirection Glossaryaccess Page programming Seegeneral-use programmingSeeinventory Seelogical Seemultisystemlogical other.single-system supervisorytask segment andDFP Index A classes continuedcontinued Page KEYSMSTR SERVERSFSCMD utilitiescontinued Page Edition OS/390 Security Server RACF Information IBM Now you can! TheIBM Online Library Productivity Page Page Communicating Your Comments to IBM commentsPublication No. GC28-1920-01 Readers Comments - Wed Like to Hear from YouOS/390 Security Server RACF Planning Installation and Migration Note CopiesBUSINESS MAILREPLY IBMPage GC28-192ð-ð1 IBMDrop in Back Cover Image Here