How do i know till what date my mainframe id will work

vinit_infy · New User Joined: 07 Apr 2005 Posts: 56

How do i know till what date my mainframe id will work? I mean do you have any idea to get the accessor id expiration date?

Any suggestion is most appreciated..

Many Thanks.
Vinit

Warning: Title Edited

cpuhawg · Posted: Mon Jan 29, 2007 7:03 pm

If your shop uses RACF, you can display your own RACF parameters by entering TSO LU USERID on the command line where USERID is equal to your own ID.

You should get results:

vinit_infy · New User Joined: 07 Apr 2005 Posts: 56

I dont have the RACF product enabled. Is there any other ways or commands to see the expiration details please?

cpuhawg · Posted: Tue Jan 30, 2007 7:20 pm

What is your security product on the mainframe? ACF2, Top Secret, or something else.

vijikesavan · Posted: Fri Mar 07, 2008 8:58 pm

Hi,
I need to know the same information as how long my user id is active.
Then I can renew it accordingly.
The commane TSO LU "userid" didnt work for me. gave error "command LU not found"

We have ACF2 installed.
Can anyone please let me know the command to check?
Thanks,
Viji

expat · Posted: Sat Mar 08, 2008 1:17 pm

Ever thought of just emailing your security admin people ?

enrico-sorichetti · Posted: Sat Mar 08, 2008 7:42 pm

it depends on your position within the company...
if You are a full time employee, the userid should not expire

if You are a consultant, usually, Your userid will not expire,
somebody will take care of disabling it at contract end

if You are in a group of contractors then Your contract/project manager should have already given You such info,
together with a document containing Your work/behavior standards and practices

in some cases You might also have been given an internal email address
and personal badge for access control

Agni · New User Joined: 22 Nov 2007 Posts: 83 Location: Chennai

Hi cpuhawg,

Can you tell me how to know that which security product is installed in my shop? When I tried the "TSO LU USERID" i got the message as follows:

RACF PRODUCT DISABLED: COMMAND ENDED.
***

Thanks in advance
Agni.

vijikesavan · Posted: Mon Mar 10, 2008 8:16 pm

Thanks for the reply.
I was a consultant and recently got converted to full time employee. So I was not sure whether my TSO userid is changed to "no expiration date"..
Just thought if I can find out before contacting system admin.
If there is no way, then I'll contact them.
Thanks,
Viji

HappySrinu · Active User Joined: 22 Jan 2008 Posts: 194 Location: India

In Acf you can try with below commands

1.TSO ACF (Mostly every one have access to see their own id's info

2. L <space> userid youwill get some info which has your privileges etc but not sure whether it has your end date of your access.

give a try

Anuj Dhawan · Posted: Thu Mar 20, 2008 2:29 am

Hi,

sri_mf · Active User Joined: 31 Aug 2006 Posts: 218 Location: India

dick scherrer · Posted: Thu Mar 20, 2008 8:10 pm

Hello,

As was suggested before, talk with the security admin people.

They can tell you which security product is being used, how long your id will "survive" (if it even has an "end date"), and any command you might use to look at your own id (if it is permitted).

One thing that will "time out" is your password and need to be changed periodically.

XOpen · New User Joined: 19 Mar 2008 Posts: 11 Location: Russia

interested in - why do you need such info ???
Just work and don't think about it. One day you will not be able to logon, will be the right day to ask sec admins - why ?

There are many ways, your userid can be revoked. I beleive, it's not your bussiness to check one of them.

For RACF users, in some systems, you can use sdsf;log to enter LU. It will be executed under operator authority, not your's...

enrico-sorichetti · Posted: Mon Mar 24, 2008 8:58 pm

XOpen · New User Joined: 19 Mar 2008 Posts: 11 Location: Russia

I mean:

/D O

enrico-sorichetti · Posted: Mon Mar 24, 2008 9:56 pm

XOpen · New User Joined: 19 Mar 2008 Posts: 11 Location: Russia

Hm.. I might be wrong, sorry, can't test in my current environment...

XOpen · New User Joined: 19 Mar 2008 Posts: 11 Location: Russia

No, no...
I mean, it can be possible that it checks my userid authority, but I do enter RACF commands via console.

Please refer to
4.0 Chapter 4. RACF operator commands
in
Security Server RACF
Command Language Reference

XOpen · New User Joined: 19 Mar 2008 Posts: 11 Location: Russia

I did it:

XOpen · New User Joined: 19 Mar 2008 Posts: 11 Location: Russia

Enrico, please check your RACF sub-prefix, before enter command.

If I use /%LISTUSER instead of /%SYSNAMELISTUSER I also get

IEE305I %LISTUSE COMMAND INVALID
, without R at the end

ps: why I can't change my previous posts ?

Anuj Dhawan · Posted: Mon Mar 24, 2008 10:43 pm

enrico-sorichetti · Posted: Mon Mar 24, 2008 10:43 pm

I just checked any user can issue a LU/LISTUSER fro ispf optio 6 to see his/her attributes

Your setup is peculiar, for example there is a glitch in the prefix used for RACF

the command prefix for a subsystem is a string or a single char ( check the db2 / ims setup )

somebody setting up Your racf subsytem name had a finger check,
thinking that %SYSNAME would be substituted by the corresponding system symbol ( maybe )
look at the INITPARM('.....') of the active iefssnxx member and substitute a single char or a meaningful string

anyway I just checked
all the racf commands issued thru the sdsf interface "/" are issued with the userid of the corresponding tso session

and to issue racf controlled commands thru the console a "LOGON" is required
and in the particular case racf commands to the racf subsystem

after all the possibility to issue racf commands thru the console is more a trouble than an advantage
logon needed in any case

enrico-sorichetti · Posted: Mon Mar 24, 2008 10:48 pm

the % in your previous posts had mislead me,
a % is the manner of telling TSO that what follows is a rexx or a clist not a command
( but since I was having a brain check I had mixed up the behavior )

no need to send racf command thru the operator interface, You will not have any authority other than Your own,