IBM Mainframe Forum Index
Log In
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register

RABBIT HOLE NEEDED - "Live" user revoke status

IBM Mainframe Forums -> All Other Mainframe Topics
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message

New User

Joined: 04 Feb 2022
Posts: 3
Location: United States

PostPosted: Tue Aug 02, 2022 12:03 am
Reply with quote

I need some help developing a solution to a bp request. We currently have an IBM DB2 table in Production which houses records of user IDs (human and nonhuman), systems they exist on, creation date, revoke status, installation data, etc. A RACF DB data dump is scheduled nightly on all lpars, all dumps are transferred to one Production system and consolidated into a master file which is then loaded into the table.

The bp has asked us to figure out a way to make this information "live" or as close as possible. my idea is to find a way to have the system cause an update in response to either a RACF revoke/resume command or system policy (too many invalid passwords triggering revoke).

My first idea was to have the bp request a specific ID to be updated and trigger a mass LU to all lpars, but that seems like a terrible way to manage this process.

My latest idea is to trigger a facility class addmem list to keep track of all revoked users, then a scheduled batch job to retrieve all facility class profiles to Production and update the tables based on the addmem list.

We own serveral Vanguard tools if that's a viable direction. I'm not looking for someone to completely solve this puzzle, but if anyone has any interesting ideas, I'm more than open to any possibilities which would send me down a research rabbit hole.

Thanks in advance!
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> All Other Mainframe Topics


Similar Topics
Topic Forum Replies
No new posts can an ISPF appl save user changes in... TSO/ISPF 14
No new posts COBOL 6.4 - User Defined Function nee... COBOL Programming 6
No new posts How to turn off 'ACTION' SDSF output ... TSO/ISPF 2
No new posts Job completes in JES, but the status ... IBM Tools 1
No new posts PuTTY - "User is not a surrogate... IBM Tools 5
Search our Forums:

Back to Top