Hi,
Years ago I created a small DFSORT job to parse an IRRDBU00 dataset to clone
userids and all authorizations. Later, Mr Kolusu enhanced and optimized it to
its final version. Thank you again Mr Kolusu.
If you want to try, here goes the job:
//RACFCLON JOB (),CLASS=A,MSGCLASS=X,NOTIFY=&SYSUID,REGION=0M
//*
// SET BASEUSER='ZR15' <== SOURCE
// SET CLONUSER='ZR23' <== TARGET
//*****************************************************************
//* CREATE RACF STATEMENTS TO CLONE THE USERID **
//*****************************************************************
//STEP0100 EXEC PGM=SORT,PARM='JP1"&BASEUSER",JP2"&CLONUSER"'
//SYSOUT DD SYSOUT=*
//SORTIN DD DISP=SHR,DSN=ZDATA.UNLOAD.RACF
//ADDUSER DD SYSOUT=*
//ALTUSER DD SYSOUT=*
//CONNECT DD SYSOUT=*
//PERMIT DD SYSOUT=*
//SYSIN DD *
OPTION COPY,VLSCMP
INCLUDE COND=((005,4,CH,EQ,C'0200',AND,010,8,CH,EQ,JP1),OR,
(005,4,CH,EQ,C'0220',AND,010,8,CH,EQ,JP1),OR,
(005,4,CH,EQ,C'0270',AND,010,8,CH,EQ,JP1),OR,
(005,4,CH,EQ,C'0102',AND,019,8,CH,EQ,JP1),OR,
(005,4,CH,EQ,C'0404',AND,062,8,CH,EQ,JP1),OR,
(005,4,CH,EQ,C'0505',AND,266,8,CH,EQ,JP1))
INREC IFTHEN=(WHEN=INIT,
BUILD=(001,004,
005,1100)),
IFTHEN=(WHEN=(5,4,CH,EQ,C'0200'),
BUILD=(1,4,
C' ADDUSER ',
JP2,C' OWNER(',30,8,C') DFLTGRP(',100,8,C') + ',
85:C' PASSWORD(',10,8,C') ',
C'NAME(''',79,20,C''')')),
IFTHEN=(WHEN=(5,4,CH,EQ,C'0220'),
BUILD=(1,4,
C' ALTUSER ',
JP2,C' TSO(PROC(',154,8,C') ',
C' ACCTNUM(',19,8,C') + ',
85:C' SIZE(',163,8,C') ',
C' MAXSIZE(',176,10,C') ',
C' UNIT(',209,8,C') )')),
IFTHEN=(WHEN=(5,4,CH,EQ,C'0270'),
BUILD=(1,4,
C' ALTUSER ',
JP2,C' OMVS(UID(',15,10,C') ',
C' HOME(',30,10,C') ',
C' PROGRAM(',1054,8,C') )')),
IFTHEN=(WHEN=(5,4,CH,EQ,C'0102'),
BUILD=(1,4,
C' CONNECT ',
JP2,C' GROUP(',10,8,C') ',
C'OWNER(',10,8,C') ',
C'AUTHORITY(',28,8,C') ')),
IFTHEN=(WHEN=(5,4,CH,EQ,C'0404'),
BUILD=(1,4,
C' PERMIT ',
C' ',10,44,C' GEN + ',
85:C' CLASS(DATASET ) ',
C'ID(',JP2,C') ',
C'ACCESS(',71,8,C') ')),
IFTHEN=(WHEN=(5,4,CH,EQ,C'0505'),
BUILD=(1,4,
C' PERMIT ',
C' ',10,44,C' + ',
85:C' CLASS(',257,8,C') ',
C'ID(',JP2,C') ',
C'ACCESS(',275,8,C') '))
OUTFIL FNAMES=ADDUSER,INCLUDE=(5,8,CH,EQ,C' ADDUSER '),
VTOF,BUILD=(5,80,/,85,80)
OUTFIL FNAMES=ALTUSER,INCLUDE=(5,8,CH,EQ,C' ALTUSER '),
VTOF,BUILD=(5,80,/,85,80)
OUTFIL FNAMES=CONNECT,INCLUDE=(5,8,CH,EQ,C' CONNECT '),
VTOF,BUILD=(5,80)
OUTFIL FNAMES=PERMIT,INCLUDE=(5,8,CH,EQ,C' PERMIT '),
VTOF,BUILD=(5,80,/,85,80)
/*
Best Regards
Ituriel do Nascimento Neto
z/OS System Programmer
Em sexta-feira, 17 de novembro de 2023 às 09:49:51 BRT, ITschak Mugzach
<[email protected]> escreveu:
If you do not have a product, use RACF unload utility and look for all
records associated with the source user and generate racf commands to copy
the user. The records are described in racf macros and interfaces guide.
ITschak
בתאריך יום ו׳, 17 בנוב׳ 2023 ב-14:44 מאת Steve Beaver <
[email protected]>:
> You only have 3 choices. zSecure or VRA Or write your own utility
>
> Sent from my iPhone
>
> No one said I could type with one thumb
>
> > On Nov 16, 2023, at 23:08, Wayne Bickerdike <[email protected]> wrote:
> >
> > *Doesn't the RACF ISPF interface have the ability to close a user?*
> >
> > No, Consul RACF which became z/Secure has that capability. As Radowslaw
> > says, set up a template or use an ISPF file tailoring skeleton with a set
> > of templates and generate from a panel.
> >
> >
> >> On Fri, Nov 17, 2023 at 1:55 PM Jon Perryman <[email protected]>
> wrote:
> >>
> >>> On Thu, 16 Nov 2023 08:04:47 +0400, Peter <[email protected]>
> wrote:
> >>>
> >>> I am looking for a rexx logic which can multiple RACFID based on one
> >> model user ?
> >>
> >> Doesn't the RACF ISPF interface have the ability to close a user?
> >>
> >> ----------------------------------------------------------------------
> >> For IBM-MAIN subscribe / signoff / archive access instructions,
> >> send email to [email protected] with the message: INFO IBM-MAIN
> >>
> >
> >
> > --
> > Wayne V. Bickerdike
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to [email protected] with the message: INFO IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN
>
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
