On Tue, 17 Dec 2019 at 16:41, esst...@juno.com <esst...@juno.com> wrote:
> Hello.I'm Not a RACF person. > . > I am looking at the RACROUTE macro, and don't see a RACROUTE > REQUEST=RESUME option. > . > I would like to resume an end-users password by submitting a job. > Can this be accomplished by using RACROUTE macros or another Assembler > interface ? > The official and easy way to do this from a program is probably to issue an ALU <userid> RESUME, using the IRRSEQ00 callable service. You'll need various RACF permissions that are not entirely obvious; these have been discussed here at various times. It's also possible to use ICHEINTY (and possibly RACROUTE EXTRACT/REPLACE) to update the FLAG4 field in the database. But there are several conditions where the user is "logically" revoked and will not be able to log on, but does not have FLAG4 on. These include revoke by a date range, revoke because of inactivity, and being revoked at the group level. There may well be others. The LU command is famous for showing not exactly what is in the database, but its interpretation of what it all means. This is mostly good, but can lead to some confusion. Tony H. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN