RACF Definition for Datacom MUF Started Task Userid

Products

• Datacom
• DATACOM - AD
• Datacom/DB

Issue/Introduction

How should the CA Datacom MUF started task userid be defined to RACF external security?

 

 

Environment

Component : CA Datacom/DB

Component : CA Datacom/AD

 

Resolution

The CA Datacom MUF userid needs to be defined to RACF the same as you would any other started task, by using the RACF STARTED class.

In order for external security to work correctly, the MUF userid must not be defined with the TRUSTED or PRIVILEGED attributes.

If the started task userid is DBMUF1, the definition could look like this:

RDEFINE STARTED DBMUF1.** DATA('DBMUF1 STC ID') DEFAULTUACC(NONE) UACC(NONE) -
   STDATA(USER(=MEMBER) GROUP(STCGROUP) TRUSTED(NO) PRIVILEGED(NO))

Then refresh the STARTED class:
SETROPTS RACLIST(STARTED) REFRESH

Note: The MUF userid does not require an OMVS segment.

 

 

Additional Information

For more information on the RDEFINE command, please refer to the z/OS 2.4 Security Server RACF Command Language Reference. 

As always, please contact Broadcom support for CA Datacom if you have further questions on the Datacom STC, or your IBM support team for RACF assistance.