User Management in RACF

 
 

The mainframe security package for the Virginia Community Colleges is RACF, Resource Access Control Facility.  Security officers for each college will need to add every college user that needs mainframe access to the RACF databases.  (You will no longer need to run the ACFADD, ACFCHG, and ACFDEL jobs.  You will  need to continue adding your users which you will do with the RADD command instead of the ACFADD job.)  The security officers will also need to delete all users that leave the college or no longer need mainframe access.   

Authorized users will be able to list userids and reset user passwords to their userids; security officers will be able to list userids and groups, reset passwords, delete userids, and add userids to the RACF databases.

At this time all changes will be made from the TSO READY prompt.

 

Command Action
ALU  userid NAME(' First M. Lastname') Changes a user name
DU  userid Deletes a user (will fail if the user has  TSO access...must request UTILITY delete  users with TSO accesses)
(CENA/WESA  lpar security officers only:You MUST check, by entering, 'LU userid', both the CENA and NOVA RACF databases for your college users and delete them if present.)
LG XXAD                    List your adminstrative userids where XX=college identifier
LG XXIDS       List all your userids; may be long
LU userid Lists a user and status information
RPW userid Resets user password to userid, resets password expiration date to current date so that user must change it when they log on
RADD userid First M. Last Adds a user to the RACF database
If you have  RACF access problems:

from batch JOBS:
     copy and paste the error message
from online:
     from the TSO READY prompt
     issue PROFILE WTPMSG          (PROFILE NOWTPMSG turns this off)
     repeat action that gave you an access problem
    copy and paste the error message
submit error messages and location (CENA/NOVA/HOST) via Issue Trak under type Mainframe - UserID.