Mark Schuffenhauer wrote,. I find it easiest to do it under PGM=IKJEFT01 Under a user who has admin authority, presuming RACF is setup correctly in ISPF with the commands.ALU User1234 RESUME . This is an interesting approach - . My thinking is to run IKJEFT01 as a short run Started Task with the proper authority and pass the respective user id (User1234) to be reset as a parameter. Once the Command is executed the Started Task would immediately end.
---------- Original Message ---------- From: "Schuffenhauer, Mark" <mschu...@tcfbank.com> To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: RACEOUTE REQUEST=RESUME ? Date: Wed, 18 Dec 2019 16:34:01 +0000 I find it easiest to do it under PGM=IKJEFT01 Under a user who has admin authority, presuming RACF is setup correctly in ISPF with the commands. ALU User1234 RESUME -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Tony Harminc Sent: Wednesday, December 18, 2019 10:27 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: RACEOUTE REQUEST=RESUME ? External Email On Tue, 17 Dec 2019 at 16:41, esst...@juno.com <esst...@juno.com> wrote: > Hello.I'm Not a RACF person. > . > I am looking at the RACROUTE macro, and don't see a RACROUTE > REQUEST=RESUME option. > . > I would like to resume an end-users password by submitting a job. > Can this be accomplished by using RACROUTE macros or another Assembler > interface ? > The official and easy way to do this from a program is probably to issue an ALU <userid> RESUME, using the IRRSEQ00 callable service. You'll need various RACF permissions that are not entirely obvious; these have been discussed here at various times. It's also possible to use ICHEINTY (and possibly RACROUTE EXTRACT/REPLACE) to update the FLAG4 field in the database. But there are several conditions where the user is "logically" revoked and will not be able to log on, but does not have FLAG4 on. These include revoke by a date range, revoke because of inactivity, and being revoked at the group level. There may well be others. The LU command is famous for showing not exactly what is in the database, but its interpretation of what it all means. This is mostly good, but can lead to some confusion. Tony H. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN DISCLAIMER: This email and any attachments may contain confidential information that is intended solely for use by the intended recipient(s). If you are not the intended recipient, you are strictly prohibited from disclosing, copying, distributing or using any of the information contained in the communication. If you received this email in error, please contact the sender by reply email and immediately delete the communication. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
