New to Z

New to IBM Z

Deepen your technical skills, expand your global network, and connect with mentors and other early tenure professionals on the mainframe platform.

 View Only
  • 1.  Simplified RACF Administration

    Posted Wed May 14, 2025 09:05 AM
    Edited by Lionel Dyck Wed May 14, 2025 09:06 AM

    There is an open-source tool known as RACFADM that was created by systems programmers who work with RACF for systems programmers who work with RACF. This tool is a full ISPF dialog written in z/OS REXX. You can get it from https://github.com/lbdyck/racfadm or from https://cbttape.org - check the updates page for the latest. 

    The main ISPF Tutorial page provides more information.



    ------------------------------
    Lionel Dyck - IBM System Z Champion
    System Z Open-Source Advocate
    Retired
    ------------------------------



  • 2.  RE: Simplified RACF Administration

    Posted Wed May 14, 2025 10:22 AM

    Hi Lionel Dyck,

    Enhanced RACF Admin Efficiency & Control = f(UFI, STS, AC, C) / C_RACF

    • Enhanced RACF Admin Efficiency & Control: The desired outcome – making RACF administration better.

    • f: "is a function of" or "is achieved through"

    • UFI: User-Friendly Interface (menu-driven, interactive modification, single scrollable display).

    • STS: Simplified Task Set (listing profiles, connecting groups, adding permissions, user auth searching, displaying auth source).

    • AC: Automation Capabilities (automating creation of aliases/datasets).

    • C: Customizability (written in Rexx, tailor $STUB).

    • C_RACF: The inherent Complexity of Native RACF (the problem being addressed). The denominator implies RACFADM reduces or mitigates this complexity.

    (Complexity of Native RACF) + [RACFADM offering (User-Friendly Interface + Simplified Common Tasks + Automation + Customization)] → More Efficient, Simpler, and Controlled RACF Security Management

    Essentially, RACFADM acts as an "enhancement layer" or a "productivity toolkit" on top of the standard RACF system, aiming to make the life of a RACF security administrator easier, faster, and less error-prone.

    Good luck!

    SUMAN



    ------------------------------
    Suman Suhag
    Dev Bhoomi Uttarakhand University
    Data Science Student
    +91 8950196825 [Jhajjar, Haryana, India]
    ------------------------------



  • 3.  RE: Simplified RACF Administration

    Posted Fri May 16, 2025 08:07 AM

    Hello Lionel.

    Thank you for this RACFADM tool. Is there a way to download the entire dataset from Github? Like in TSO XMIT format or do we have to download each member one by one?



    ------------------------------
    Daniel Hamiel
    ------------------------------



  • 4.  RE: Simplified RACF Administration

    Posted Fri May 16, 2025 08:54 AM

    The easy way is to use git to clone the repository to your system.  If you don't have git on your z/OS system then check out IBM's Open Enterprise Foundation (OEF) which is free and included with z/OS 2.5 and 3.1 (and soon 3.2) that includes git, or get git from the https://github.com/zopencommunity.

    If you are unable to use git then you can download directly from the CBTTape website using this url: https://cbttape.org/ftp/updates/CBT417.zip

    hope this helps



    ------------------------------
    Lionel Dyck - IBM System Z Champion
    System Z Open-Source Advocate
    Retired
    ------------------------------



  • 5.  RE: Simplified RACF Administration

    Posted 13 days ago

    Yet another update thanks to John Kalinich 

    get it at https://github.com/lbdyck/racfadm and soon https://cbttape.org in file 417

    17 Jul 2025 - V40R2                                                
       - Tutorial (Option T)                                           
         -- Updated panel #RACLINE to document Digital certificate     
            line commands                                              
       - User Profiles (Option 1)                                      
         -- Updated RACFUSR to add LEFT/RIGHT primary commands to      
            allow scrolling of tablea                                  
       - Generate profile source (Option G)                            
         -- Updated RACFGEN exec to use LRECL=300 if general resource  
            profile names are greater than 52 in length.  If so,       
            use RACRUN.                                                
         -- Added RACFGENA exec to generate profile source for ALL     
            "active" resource profiles if ALL is entered as the class  
            on the input panel.                                        
         -- Added #RACGENA tutorial panel.                             
       - Other Items                                                   
         -- Updated exec RACFPROF to print header line correctly       
            when processing a long profile name.                       

    17 Jul 2025 - V40R2                                                
       - Tutorial (Option T)                                           
         -- Updated panel #RACLINE to document Digital certificate     
            line commands                                              
       - User Profiles (Option 1)                                      
         -- Updated RACFUSR to add LEFT/RIGHT primary commands to      
            allow scrolling of tablea                                  
       - Generate profile source (Option G)                            
         -- Updated RACFGEN exec to use LRECL=300 if general resource  
            profile names are greater than 52 in length.  If so,       
            use RACRUN.                                                
         -- Added RACFGENA exec to generate profile source for ALL     
            "active" resource profiles if ALL is entered as the class  
            on the input panel.                                        
         -- Added #RACGENA tutorial panel.                             
       - Other Items                                                   
         -- Updated exec RACFPROF to print header line correctly       
            when processing a long profile name.                       



    ------------------------------
    Lionel Dyck - IBM System Z Champion
    System Z Open-Source Advocate
    Retired
    ------------------------------