How should the CA Datacom MUF started task userid be defined to RACF external security?
Component : CA Datacom/DB
Component : CA Datacom/AD
The CA Datacom MUF userid needs to be defined to RACF the same as you would any other started task, by using the RACF STARTED class.
In order for external security to work correctly, the MUF userid must not be defined with the TRUSTED or PRIVILEGED attributes.
If the started task userid is DBMUF1, the definition could look like this:
RDEFINE STARTED DBMUF1.** DATA('DBMUF1 STC ID') DEFAULTUACC(NONE) UACC(NONE) -
STDATA(USER(=MEMBER) GROUP(STCGROUP) TRUSTED(NO) PRIVILEGED(NO))
Then refresh the STARTED class:
SETROPTS RACLIST(STARTED) REFRESH
Note: The MUF userid does not require an OMVS segment.
For more information on the RDEFINE command, please refer to the z/OS 2.4 Security Server RACF Command Language Reference.
As always, please contact Broadcom support for CA Datacom if you have further questions on the Datacom STC, or your IBM support team for RACF assistance.