How to add new field to ACF2 user logonid record using ACFFDR and set up new attribute ID in LDS LDAP Record?

Products

• ACF2 - z/OS

Issue/Introduction

ACF2 commands used to implement a new attribute ID in LDS LDAP record and then add a new field to the user logonid record in ACF2 using ACFFDR.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

The following describes a sample set up for creating a new field in the ACF2 user logonid record and adding the attribute in LDS LDAP Record.

Step 1: Create a field in the user logonid record in the ACFFDR by making the appropriate updates in the USERMOD UM99901 located in the CAX1JCL0 library. The new field should be added in the USERLID (or USERXLID) and USERCFDE portions.

Sample entry for USERLID (or USERXLID):

LIDUCOM  DS    CL1       *** COMPANY INDICATOR

• Important Note: When adding the new field to the USERLID or USERXLID section, make the addition at the end of existing data.

Sample @CFDE entry:

@CFDE  COMPANY,LIDUCOM,CHAR,ALTER=ACCOUNT,LIST=ALL,PRTN=1,          
RRTN=1,GROUP=0

• Once the changes have been made, receive and apply the USERMOD

 

Step 2: Update the XREF field in LDS LDAP record to include the 8-character field name for the logonid record and the associated attribute name.

To update an existing LDS record:

ACF2
SET CONTROL(LDS)
CHANGE LDAP.SUFFIX XREF(COMPANY/LdapCompany) ADD

Step 3: Refresh the LDS LDAP Record

ACF2
SET CONTROL(LDS)
F ACF2,REFRESH(LDAP),TYPE(LDS)

Additional Information

Update the CA ACF2 Field Definition Records (ACFFDR)

Sample LDAP Directory Services (LDS) Configuration