Conversion here happened in the mid 80s years before I came. The method was apparently RYO brute force 'translation' of every attribute in ACF2 to something comparable (or at least workable) in RACF. The result is that today we have over 14K userids and over 4K groups. These numbers far exceed anything reasonable given the number mainframe personnel. At the time of the conversion, no one wanted to spend extra time culling the gems from the pebbles.
I suggest that if you're serious about converting, regardless of who does it or how, you create a sub-project to whittle down your current ACF2 environment to what you really need. Be aware that ACF2 allows you to include ids that are substrings of a defined id but are not themselves permitted explicitly. As Walt suggests, this is not necessarily something an amateur should try at home. ;-) . . JO.Skip Robinson SCE Infrastructure Technology Services Electric Dragon Team Paddler SHARE MVS Program Co-Manager 626-302-7535 Office 323-715-0595 Mobile [email protected] From: Walt Farrell <[email protected]> To: [email protected] Date: 04/20/2012 01:46 PM Subject: Re: ACF2 - RACF Conversion Utility Sent by: IBM Mainframe Discussion List <[email protected]> On Fri, 20 Apr 2012 15:54:25 -0400, George Henke <[email protected]> wrote: >Does anyone know of an ACF2 to RACF conversion utility? IBM, Vanguard, and others have utilities that will help with that, usually (as far as I know) as part of a priced service offering. And from my experiences watching from the sidelines while I was an IBMer, and talking to the IBMers who did the conversions, I would strongly recommend using a vendor-provided service rather than trying it on your own. There can be a lot of subtleties involved with getting the conversion done right, and it can require a strong knowledge of both security systems to get a successful conversion and make the best use of the new product. -- Walt ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
