IBM Security Z Security

 View Only

  • 1.  passwords

    Posted Tue March 09, 2021 01:45 PM
    ​​Is there a way using zSecure that I can recreate a user with it's current password to a test RACF database. Recreating it is no problem but I'm not seeing the current password in the generated commands. If I can get it to work I will be using it for over 100 users. We are using KDFAES.

    ------------------------------
    dean nai
    ------------------------------


  • 2.  RE: passwords

    Posted Tue March 09, 2021 01:57 PM
    Hi Dean,

    Yes, there is a way.

    (1) You need to have a RACF database (copy) as the input source as opposed to an UNLOAD, because the UNLOAD does not contain the password.
    (2) You need to select the option "Use CKGRACF to update the user profile" when doing the RECREATE (and you must have set up the CKGRACF component of zSecure Admin).

    You can see the CARLa used to generate the commands in the SCKRCARL(CKGXRUS) member.

    Regards,

    ------------------------------
    Jeroen Tiggelman
    Software Development and Level 3 Support Manager IBM Security zSecure Suite
    IBM
    Delft
    ------------------------------

    Original Message