"S RESUME,USER=abc12345" with RESUME a tso proc to capture the USER parameter? Sure.
On Wed, Dec 18, 2019 at 1:13 PM esst...@juno.com <esst...@juno.com> wrote: > > Mark Schuffenhauer wrote,. > I find it easiest to do it under PGM=IKJEFT01 > Under a user who has admin authority, presuming RACF is setup correctly in > ISPF with > the commands.ALU User1234 RESUME > . > This is an interesting approach - > . > My thinking is to run IKJEFT01 as a short run Started Task with the proper > authority and pass the respective user id (User1234) to be reset as a > parameter. Once the Command is executed the Started Task would immediately > end. > > ---------- Original Message ---------- > From: "Schuffenhauer, Mark" <mschu...@tcfbank.com> > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: RACEOUTE REQUEST=RESUME ? > Date: Wed, 18 Dec 2019 16:34:01 +0000 > > I find it easiest to do it under PGM=IKJEFT01 > Under a user who has admin authority, presuming RACF is setup correctly in > ISPF with the commands. > > ALU User1234 RESUME > > > -----Original Message----- > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of > Tony Harminc > Sent: Wednesday, December 18, 2019 10:27 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: RACEOUTE REQUEST=RESUME ? > > External Email > > On Tue, 17 Dec 2019 at 16:41, esst...@juno.com <esst...@juno.com> wrote: > > > Hello.I'm Not a RACF person. > > . > > I am looking at the RACROUTE macro, and don't see a RACROUTE > > REQUEST=RESUME option. > > . > > I would like to resume an end-users password by submitting a job. > > Can this be accomplished by using RACROUTE macros or another Assembler > > interface ? > > > > The official and easy way to do this from a program is probably to issue an > ALU <userid> RESUME, using the IRRSEQ00 callable service. You'll need various > RACF permissions that are not entirely obvious; these have been discussed > here at various times. > > It's also possible to use ICHEINTY (and possibly RACROUTE EXTRACT/REPLACE) to > update the FLAG4 field in the database. But there are several conditions > where the user is "logically" revoked and will not be able to log on, but > does not have FLAG4 on. These include revoke by a date range, revoke because > of inactivity, and being revoked at the group level. There may well be > others. The LU command is famous for showing not exactly what is in the > database, but its interpretation of what it all means. This is mostly good, > but can lead to some confusion. > > Tony H. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send email to > lists...@listserv.ua.edu with the message: INFO IBM-MAIN > DISCLAIMER: This email and any attachments may contain confidential > information that is intended solely for use by the intended recipient(s). If > you are not the intended recipient, you are strictly prohibited from > disclosing, copying, distributing or using any of the information contained > in the communication. If you received this email in error, please contact the > sender by reply email and immediately delete the communication. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
