IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Full row output for RACF group connects

    Posted Mon April 28, 2025 11:20 AM

    Hello,

    1. A sample carla scripts to list all group connects, it shows only the group name once. Is there a way to report the group name in every row.
    2. Is it possible to show only the connected userid and not the other fields (Auth    R SOA AG Uacc    Revokedt    Resumedt  )

    Carla:

    newlist  n=baseg3 segment=base     
    select s=base c=group              
    sortlist  key(8), connects         

    Output:

    Profile  User/Grp Auth    R SOA AG Uacc    Revokedt    Resumedt                 
    ADB            UDB2HK   USE              NONE                                         
                         DB8002   USE              NONE                                         
    AGFEFT1  T063     USE              NONE                                         
                       T062     USE              NONE                                         
                        T061     USE              NONE                  

    Is it possible to get this ouput:

    Profile  User/Grp
    ADB            UDB2HK                                       
    ADB            DB8002                                          
    AGFEFT1  T063                                    
    AGFEFT1   T062                                        
     AFGEFT1 T061    

    Thanks for your hints on before hand.,

    With kind regards 

    Stan van Oers

                         
        



    ------------------------------
    Stan van OERS
    ------------------------------


  • 2.  RE: Full row output for RACF group connects

    Posted Mon April 28, 2025 02:34 PM
    Edited by Jeroen Tiggelman Mon April 28, 2025 02:34 PM

    Hi Stan,

    The CARLa modifier to repeat non-repeated field values on all lines created by the repeated fields is called RETAIN.

    You can either put it on the NEWLIST (for all non-repeated fields except the ones you separately mark with NORETAIN), or as a field modifier, like KEY(8, RETAIN).

    https://www.ibm.com/docs/en/szs/3.1.0?topic=SS2RWS_3.1.0/carla_lang/carla_cmnd_lang_list_family_cmds_nonrpt_out_mods.htm

    https://www.ibm.com/docs/en/szs/3.1.0?topic=newlist-parameter-descriptions

    Regards,

    Jeroen



    ------------------------------
    Jeroen Tiggelman
    IBM - Software Development Manager IBM Security zSecure
    Delft
    ------------------------------

    Original Message


  • 3.  RE: Full row output for RACF group connects

    Posted Mon April 28, 2025 02:38 PM

    And if you meant clipping the output from CONNECTS beyond the user ID, you can of course code an overriding length of 8: CONNECTS(8).



    ------------------------------
    Jeroen Tiggelman
    IBM - Software Development Manager IBM Security zSecure
    Delft
    ------------------------------

    Original Message


  • 4.  RE: Full row output for RACF group connects

    Posted Mon April 28, 2025 02:41 PM

    newlist  retain
    select s=base c=group              
    sortlist  key(8) connects(8)



    ------------------------------
    Jeroen Tiggelman
    IBM - Software Development Manager IBM Security zSecure
    Delft
    ------------------------------

    Original Message


  • 5.  RE: Full row output for RACF group connects

    Posted Fri May 02, 2025 04:42 AM

    Jeroen,

    Thanks for your hints and tips. I have the output now as I want.

    Stan



    ------------------------------
    Stan van OERS
    ------------------------------

    Original Message


Related Content