ACF2 AUTOIDOM automatic assignment of UID and GID

book

Article ID: 205482

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - z/OS CA ACF2 - MISC

Issue/Introduction

Setting up AUTOIDOM for BPX.NEXT.USER and BPX.UNIQUE.USER to automatically assignment of UID/GIDs and OMVS MODEL USER: MODLUSER.

Environment

Release : 1.0

Component : CA LDAP Server for z/OS

Resolution

Sites that want unique UIDs and GIDs to be assigned through the Unix System Services initUSP, getGMAP and getUMAP callable services then the ACF2 equivalent of RACF BPX.UNIQUE.USER and BPX.NEXT.USER would be needed. The ACF2 equivalent of BPX.UNIQUE.USER and BPX.NEXT.USER would be the GSO UNIXOPTS parameter UNIQUSER and the GSO AUTOIDOM record configured.

The MODLUSER is defined in the GSO UNIXOPTS record:

MODLUSER(modeluser)
Specifies the name of a model OMVS user profile record that defines attributes for UNIX System Services (OMVS). If a user accesses OMVS services and does not have an OMVS user profile record, the attributes defined in this OMVS user profile record(except the UID) are used to initialize a new OMVS user profile record for the user. The 'modeluser' can be any 1-8 character name of an existing OMVS User Profile record, there does not need to be a corresponding logonid defined for the 'modeluser'.

AUTOIDOM is a GSO record can be used for automatic assignment of UID and GID values for PROFILE(USER),DIV(OMVS), and PROFILE(GROUP),DIV(OMVS) records. The AUTOIDOM can be set up by entering the following:

SET CONTROL(GSO) 
INSERT AUTOIDOM ASSIGNU ASSIGNG
F ACF2,REFRESH(AUTOIDOM)

UIDs are granted in a range of numbers from 1 to 2,147,483,647 and if you wish to narrow down the range, you have the option to do so with the UIDSTART(nnn), UIDEND(nnn), GIDSTART(nnn) and GIDEND(nnn) parameters entered in the INSERT command. A list of parameters can be found in the ACF2 documentation under Automatic UID/GID Assignment Options (AUTOIDOM).

Automatic assignment of UID  
The UID can be auto-assigned when the AUTOUID keyword is specified or implied when inserting or changing an OMVS User Profile data record. For example:

SET PROFILE(USER) DIV(OMVS)
INSERT OMVSUSR3
OMVS / OMVSUSR3 LAST CHANGED BY USER01 ON 06/26/03-16:26
                 UID(195)

SET PROFILE(USER) DIV(OMVS)
INSERT OMVSUSR4 AUTOUID
OMVS / OMVSUSR4 LAST CHANGED BY USER01 ON 06/26/03-16:26
                 UID(196)

SET PROFILE(USER) DIV(OMVS)
CHANGE OMVSUSR3 AUTOUID
OMVS / OMVSUSR LAST CHANGED BY USER01 ON 06/26/03-16:30
                 UID(197)

When a logonid utilizes OMVS(USS) services(for example TSO OMVS) and that logonid does not have a OMVS User Profile record, a new OMVS User Profile record will be dynamically created with an auto-assigned UID number.

Automatic assignment of GID
The GID can be auto-assigned when the AUTOGID keyword is specified or implied when inserting or changing an OMVS Group Profile data record. For example:

SET PROFILE(GROUP) DIV(OMVS)
 INSERT OMVSGRP3                                                   
  OMVS / OMVSGRP3 LAST CHANGED BY USER01 ON 12/17/20-13:06        
                       GID(1,007)                                  
SET PROFILE(GROUP) DIV(OMVS)                                                         
INSERT OMVSGRP4 AUTOGID                                            
  OMVS / OMVSGRP4 LAST CHANGED BY USER01 ON 12/17/20-13:06        
                       GID(1,008)                                  
SET PROFILE(GROUP) DIV(OMVS)                                                         
CHANGE OMVSGRP3 AUTOGID                                            
  OMVS / OMVSGRP3 LAST CHANGED BY USER01 ON 12/17/20-13:07        
                       GID(1,009)       

When a logonid utilizes OMVS(USS) services(for example TSO OMVS) and that logonid has logonid with a GROUP(xxxxxxxx) specified and there is no 'xxxxxxxx' OMVS Group Profile record, a new OMVS Group Profile record will be dynamically created with an auto-assigned GID number.