IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  How do you create a mixed report in Carla?

    Posted Thu August 14, 2025 08:26 AM

    Hello everyone,
    I would like to create a RACF report in which you can evaluate and compile different classes or segments.
    The Merge Report is not what I need.
    I imagine it more like in classic SQL:
    For example, I query User ID and Name (Class=User, S=Base), UID and Home (Class=User and S=OMVS), and the logon procedure (Class=User, S=TSO).
    Now I would like to display the returned values in a row:
    User ID Name UID Logon procedure
    Is this possible in Carla? Even for someone who is not very skilled in Carla?
    Best regards
    Stephan



    ------------------------------
    Stephan Reichelt
    ------------------------------


  • 2.  RE: How do you create a mixed report in Carla?

    Posted Thu August 14, 2025 09:35 AM
    Edited by Tom Zeehandelaar Thu August 14, 2025 09:36 AM

    Hi Stehpan,

    Yes that is possible, even for someone that is not a very skilled CARLa progammer. 
    zSecure supports a functions that is called 'cross segment lookup' also known as 'implicit lookup'. This CARLa function enables users to retrieve information from other segments of the same (user) profile than you selected in your SELECT statement. 

    The way this works is that you use a colon (:) in your SORTLIST statement preceding the field name that you want to LOOKUP from a different segment of the same user profile. 

    For example:

    n type=racf                                 
     select class=user segment=base mask=crmbtz*
     sortlist key("Userid",8) name :uid :tlproc 

    Running this CARLa script produces the following output in my z/OS development system:

    P R O F I L E   L I S T I N G   13 Aug 2025 23:45
                                                     
    Userid   Name                 Uid   ProcName     
    CRMBTZ1  TOM ZEEHANDELAAR         0 TSOZSEC      
    CRMBTZ2  TOM ZEEHANDELAAR         0 TSOZSEC      
    CRMBTZ3  TOM ZEEHANDELAAR         0 TSOZSEC      
    CRMBTZ4  TOM ZEEHANDELAAR         0 TSOZSEC      

    I hope this helps.



    ------------------------------
    Tom Zeehandelaar
    z/OS Security Enablement Specialist - zSecure developer
    IBM
    ------------------------------



  • 3.  RE: How do you create a mixed report in Carla?

    Posted Fri August 15, 2025 01:34 AM

    Hi Tom,
    Thanks, yes, that helps a lot.
    Is it also possible to query across classes? For example, query data from the User and Group classes and mix them together?
    Best regards
    Stephan



    ------------------------------
    Stephan Reichelt
    ------------------------------



  • 4.  RE: How do you create a mixed report in Carla?

    Posted Fri August 15, 2025 03:14 AM

    The SELECT command support OR (in addition to the defaulted AND operator).  However, each NEWLIST only has 1 SORTLIST command and the field names specified on SORTLIST apply to all selected profiles.  Take this example of listing OMVS segments:

    newlist type=racf title="User and group definitions for z/OS UNIX"
      select (class=user or class=group) segment=omvs
      sortlist profile(8) class uid home(20) gid 

    For groups, GID is shown, but not UID and HOME.  Typically, mixing classes in a newlist block works well if there are several field names common to the selected records.

    The MERGELIST function offers more flexibility in formatting output lines just right:

    mergelist
    newlist type=racf title="User and group definitions for z/OS UNIX"
      select class=user segment=omvs
      sortlist profile(8) class uid("UNIX id",9) :name home(20)
    newlist type=racf 
      select class=group segment=omvs
      sortlist profile(8) class gid(9) :instdata
    endmerge



    ------------------------------
    Rob van Hoboken
    ------------------------------



  • 5.  RE: How do you create a mixed report in Carla?

    Posted Mon August 18, 2025 01:15 AM
    Edited by Stephan Reichelt Mon August 18, 2025 01:15 AM

    Hi Rob,
    Great, thank you very much.
    That's exactly what I was looking for.
    Best regards
    Stephan



    ------------------------------
    Stephan Reichelt
    ------------------------------