IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Input File Ignored

    Posted 8 days ago

    Hello,

     

    I sure can use some help. I'm trying to get a list of users in the RACF groups but instead of a dump of every RACF group I have an input file. The input file seems to be ignored and I can't figure out why but suspect my first newlist is missing something.

    If I understand correctly, the contents of the input file will be captured in the NAME=MYLIST.  

    DefType type=$MID                                     

    Define  type=$MID groups as Substr(record,1,8)        

    Alloc   type=$MID dd=INMIDS                ç========JCL has this DD name with the subset of ~ 100 RACF groups           

                                                           

    NEWLIST type=RACF NAME=MYLIST                         

      Select class=group segment=base                     

                                                           

    Alloc type=unload dd=scha     complex=SHA10           

    Suppress msg=2363                                     

                                                           

    Newlist type=RACF dd=CMT0MIDS                         

    Select segment=base LIKELIST=MYLIST                   

    Exclude cggrpct=0                                     

                                                           

    Sortlist,                                             

      'DATE'(toptitle),                                   

      :run.Datetime(toptitle),                            

      'DCS - MID AND RELEASE COORDINATOR GROUPS'(toptitle),

    key(8,'Group'),    

    Userid(8, "User-ID")



    ------------------------------
    Jack Yucuis
    ------------------------------


  • 2.  RE: Input File Ignored

    Posted 7 days ago
    Edited by Rob van Hoboken 7 days ago

    Hi Jack

    Is this CARLa program generated by an AI, or did you find samples in previous postings on the forum?  There are some things amiss:

    1. You have a DEFTYPE/DEFINE/ALLOC sequence that correctly identifies an external file.  However, there is no reference to the TYPE name in your actual reporting code, so zSecure has no need to use the file.
    2. You have (correctly) used a selection NEWLIST with NAME=MYLIST.  This selects all GROUP profiles.  That is good.  But then you have an output generating NEWLIST that writes to ddname CMTOMIDS and this excludes records with a field CGGRPCT.  This field is only present in USER profiles.  The EXCLUDE command is meant to suppress users irrcerta, irrmulti and irrsitec, so it does not show these confusing certificate anchors as if they were real users.  The EXCLUDE command is not useful in GROUP reports.

    .

    If you want to report on the group names in the external file, you need to change the SELECT command in the 1st NEWLIST, or add an EXCLUDE command, to reference the external file:

    SELECT CLASS=GROUP SEGMENT=BASE EXISTS(KEY:$MID.GROUPS.RECORD)

    or

    EXCLUDE MISSING(KEY:$MID.GROUPS.RECORD)


    ------------------------------
    Rob van Hoboken
    ------------------------------