We have 3 Sysplexes (Prod, Dev, Sandbox) each with their own RACF Databases. We use RRSF to connect all 3 databases. Any updates to the Prod and Dev databases are propagated to the other 2 databases (therefore all databases are in sync with the rules defined) The Sandbox database receives rule changes but does not send rules to the other 2 databases. We set it up this way exactly to be able to test in the sandbox but not affect Prod or Dev but being able to keep the DB's in sync. All password changes are synced between all 3 DB's
You may be able to do this for your Prod/Dev split. Jerry Whitteridge Lead Systems Programmer Safeway Inc. 925 951 4184 If you feel in control you just aren't going fast enough. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Tom Ambros Sent: Tuesday, July 23, 2013 8:55 AM To: [email protected] Subject: Two RACF databases with different definitions in a single sysplex? A group is concerned that we have a single RACF database and there is no 'test' RACF database where the organization can implement 'test' rulesets. We have two sysplexes - a systems sandbox with no applications and a mixed development/production sysplex where all the applications reside. The only way I see this happening is if non-production partitions refer to one RACF database and the production partitions refer to the other. However, there is no binary separation of production and non-production work, and all resources (datasets etc.) are accessible from every partition. Intuitively I think their idea is not good practice, to say the very least. Does anybody know of IBM documentation that can allow me to back up my assertion that they are proposing a mistake? Thomas Ambros Operating Systems and Connectivity Engineering 518-436-6433 This communication may contain privileged and/or confidential information. It is intended solely for the use of the addressee. If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of this information. If you received this communication in error, please contact the sender immediately and destroy the material in its entirety, whether electronic or hard copy. This communication may contain nonpublic personal information about consumers subject to the restrictions of the Gramm-Leach-Bliley Act. You may not directly or indirectly reuse or redisclose such information for any purpose other than to provide the services for which you are receiving the information. 127 Public Square, Cleveland, OH 44114 If you prefer not to receive future e-mail offers for products or services from Key send an e-mail to mailto:[email protected] with 'No Promotional E-mails' in the SUBJECT line. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN "Email Firewall" made the following annotations. ------------------------------------------------------------------------------ Warning: All e-mail sent to this address will be received by the corporate e-mail system, and is subject to archival and review by someone other than the recipient. This e-mail may contain proprietary information and is intended only for the use of the intended recipient(s). If the reader of this message is not the intended recipient(s), you are notified that you have received this message in error and that any review, dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately. ============================================================================== ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
