On Tue, 17 Dec 2019 at 16:41, esst...@juno.com <esst...@juno.com> wrote:

> Hello.I'm Not a RACF person.
> .
> I am looking at the RACROUTE macro, and don't see a RACROUTE
> REQUEST=RESUME option.
> .
> I would like to resume an end-users password by submitting a job.
> Can this be accomplished by using RACROUTE macros or another Assembler
> interface ?
>

The official and easy way to do this from a program is probably to issue an
ALU <userid> RESUME, using the IRRSEQ00 callable service. You'll need
various RACF permissions that are not entirely obvious; these have been
discussed here at various times.

It's also possible to use ICHEINTY (and possibly RACROUTE EXTRACT/REPLACE)
to update the FLAG4 field in the database. But there are several conditions
where the user is "logically" revoked and will not be able to log on, but
does not have FLAG4 on. These include revoke by a date range, revoke
because of inactivity, and being revoked at the group level. There may well
be others. The LU command is famous for showing not exactly what is in the
database, but its interpretation of what it all means. This is mostly good,
but can lead to some confusion.

Tony H.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to