Adding new ACF2 LID field for attribute ID in LDS LDAP

Products

• ACF2 for z/OS

Issue/Introduction

The following sample ACF2 commands can be used to add a new field to the user logonid record in ACF2 using ACFFDR which can then be implemented as a new attribute ID in an LDS LDAP record.

Resolution

The steps are as follows:

1. Create a field in the user logonid record in the ACFFDR by making the appropriate updates in the USERMOD UM99901 located in the CAX1JCL0 library. The new field should be added in the USERLID (or USERXLID) and USERCFDE portions.
   
   Sample entry for USERLID (or USERXLID):
   

   LIDUCOM  DS    CL1       *** COMPANY INDICATOR

   
   Important Note: When adding the new field to the USERLID or USERXLID section, make the addition at the end of existing data.
   
   Sample @CFDE entry:
   

   @CFDE  COMPANY,LIDUCOM,CHAR,ALTER=ACCOUNT,LIST=ALL,PRTN=1,
              RRTN=1,GROUP=0

   
   Once the changes have been made, receive and apply the USERMOD
   
   
2. Update the XREF field in LDS LDAP record to include the 8-character field name for the logonid record and the associated attribute name.
   
   To update an existing LDS record:
   
   ACF2
   SET CONTROL(LDS)
   CHANGE LDAP.SUFFIX XREF(COMPANY/LdapCompany) ADD
   
   
3. Refresh the LDS LDAP Record
   
   ACF2
   SET CONTROL(LDS)
   F ACF2,REFRESH(LDAP),TYPE(LDS)

Additional Information

Update the Field Definition Records (ACFFDR)

Sample LDAP Directory Services (LDS) Configuration