Hello,

Is there anybody who has experience with the following:

We would like to verify from a COBOL program (IMS transaction) whether a user has a connect to a certain group in RACF. We were planning to use function ADMN_XTR_CONNECT of service IRRSEQ00. is there somewhere an example piece of code showing this call? We cannot figure out which copybooks to use etc. The pages on it are rather generic (https://www.ibm.com/docs/en/zos/3.1.0?topic=documentation-profile-extract-functions)." href="https://www.ibm.com/docs/en/zos/3.1.0?topic=documentation-profile-extract-functions)." rel="noreferrer noopener" target="_blank" class="fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn" title="https://www.ibm.com/docs/en/zos/3.1.0?topic=documentation-profile-extract-functions).">https://www.ibm.com/docs/en/zos/3.1.0?topic=documentation-profile-extract-functions).  We only need to check whether one specific user has a connect to one single group.

Thanks in advance

Stan van Oers

------------------------------
Stan van OERS
------------------------------

Hi Stan, r_Admin is a callable service. I think the best way is to call IRRSEC00 from the Cobol program and pass the parameter list, output values are returned in the parameter list. IRRSEC00 should be link-edit in the Cobol load module.I'm not sure if you can use the Cobol CALL statement. I think you don't need any copybooks. 

Example:

CALL IRRSEQ00 (Work_area,
  ALET, SAF_return_code,
  ALET, RACF_return_code,
  ALET, RACF_reason_code,
  Function_code,
  Parm_list,
  RACF_userID,
  ACEE_ptr,
  Out_message_subpool,
  Out_message_strings
)

Regards, 

Paul. 

See also https://www.ibm.com/docs/en/zos/3.1.0?topic=api-usage-notes

------------------------------
PAUL HORN -IBM - Software Architect / Developer
------------------------------