Hi James,
LIST USER TAG support for MFA data is certainly a candidate for an SPE.
Support for password fallback status, policies, and factors can be included.
You are welcome to make a request on https://ideas.ibm.com/.
Regards,
------------------------------
Luc Rutten
Advisory Software Engineer, zSecure
IBM
Delft
------------------------------
Original Message:
Sent: Tue July 04, 2023 03:48 AM
From: James Lumsden
Subject: CKGRACF LIST USER - MFA information
Hi Luc,
Thanks for the response.
It would be a really useful enhancement if the MFA data could be included in the output. I am specifically using the tag format to be parsed simply by a distributed (unix) service.
Candidate for an SPE?
Thanks
------------------------------
James Lumsden
------------------------------
Original Message:
Sent: Fri June 30, 2023 10:08 AM
From: Luc Rutten
Subject: CKGRACF LIST USER - MFA information
The CKGRACF FIELD … MFDATA command is rather meant for recreating general resource profiles-not for copying userids.
Regards,
------------------------------
Luc Rutten
Advisory Software Engineer, zSecure
IBM
Delft
Original Message:
Sent: Fri June 30, 2023 09:16 AM
From: Luc Rutten
Subject: CKGRACF LIST USER - MFA information
Hi James,
The CKGRACF LIST USER command has no support for MFA data.
With CKGRACF CMD commands on the other hand, RACF LISTUSER and ALTUSER MFA commands can be issued.
The CKGRACF FIELD command provides MFDATA (MFA segment free-form factor metadata) support,
but this is primarily meant for execution of "Copy userid" actions issued from the zSecure UI.
Regards,
------------------------------
Luc Rutten
Advisory Software Engineer, zSecure
IBM
Delft