Hi,

I would like to have a summery of all RACF-dataset-profiles and the number of existing datasets covered by each profile.

My way of working is; I create a CKFREEZE-file with all DASD/VTOC/RMM/... included and have a CARLA-script running on it.

The parameters of my CKFREEZE-file are :

Collect parameters and commands

DASD=Y,PATH=N,SCAN=N,CAT=Y,SMS=N,UNIX=N,DB2CAT=N,VTOC=Y,CICS=N,

MQ=N,DB2=N,BCD=N,MCD=N,RMM=Y

SERIALIZATION(WAIT,ENQ(CKRDSN,SYSDSN),MAXWAIT(30))

The result (looking at the SPACE Usage of the CKFREEZE) is :

Space usage Line 29 of 5

4 Nov 2020 14:52

Type Records Bytes Bytes Contents

...

30 1717 3530421 3530k VTOC index

31 1353951 201738699 201M7 VTOC data set

32 1097 4485633 4486k VVCR/VVCN/VVCM

33 1276665 310770360 310M8 VVR/NVR

35 + 2714 1358816 1359k Security information

3E + 61272 1347984 1348k Volume context definition bracket

40 7258793 1128015748 1128M Catalog record

45 1 253 253 ICSF CKDS key label record

4A 1688088 902425958 902M4 RMM control data set record

4B 1 181 181 ICSF PKDS key label record

4E + 9964 528092 528k1 Context definition bracket

50 35521 9732754 9733k PDS directory blocks

...

The CARLA-script is :

ALLOC TYPE=RACF PRIMARY ACTIVE FREE

ALLOC TYPE=CKFREEZE DSN='SYSU.CONSUL.CPU.DEV.CKFREEZE.DSLIST'

NEWLIST TYPE=DSN NAME=DSNLIST DD=CKRCMD01 NOPAGE

SUMMARY COMPLEX(5) PROFILE QUAL

The result of the script is a nice summary with acceptable numbers, but I can see that datasets residing on tape, are not included in the list.

Any idea what is going wrong?

Regards,

Dirk De Bruyne

Hi Dirk,

zSecure Collect does not capture tape data set names, only disk data set names, so the resulting report is not going to contain tape data sets.

I hope this answers your question.

Best regards,

John Young

Thanks John,

I was already afraid of it ..

But can I then extend the question; 'How should I proceed to have the files residing on tape listed/included ?'

When I do a '34' in front of dataset-profile, the tape-ds are listed.

Any proposition is welcome.

Thanks and regards,

Dirk

Hi Dirk,

I would recommend opening up an RFE (Request For Enhancement) to address collection and reporting of tape data sets. Here is the link to the RFE community:

https://www.ibm.com/developerworks/rfe/execute?use_case=changeRequestLanding&BRAND_ID=301&PROD_ID=261

Best regards,

John Young

Hi Dirk,

I have discussed this with my colleagues, and the best course of action would be to open a case with us so we may assist you further on this issue.

Best regards,

John Young

Thanks John,

I created case TS004480738.

Regards,

Dirk

A support case has now been opened asking this question so zSecure L2 will continue via the case.

The above update is not entirely accurate as tape DSNs are collected in the CKFREEZE unless suppressed (from CA1, CA-TLMS, RMM, and ICF catalogs). However, there are some issues reporting on the tape dataset names that have been collected, and this will be addressed as part of APAR OA60338.