Passticket - Usage of PTKTDATA profile records in ACF2

Products

• ACF2
• ACF2 - MISC
• ACF2 - z/OS

Issue/Introduction

It might be needed to get the information of how many of the PTKTDATA profile records are being used, so this article aims to create a guide on how to do it, since passticket usage information is not stored on ACF2 databases.

Environment

Component :  ACF2 for z/OS

Resolution

To get this information, the solution has two steps:

• First, setting up a SECTRACE, so any request of a PTKTDATA profile record will be registered; 
• Second, running the ACFRPTST utility to retrieve and format the data registered from SECTRACE.

Since the information will be gathered only while the SECTRACE is active, to have a better idea on which PTKTDATA profile records are being used, it is advisable to have the SECTRACE active for a long period of time and/or for different times of the day.

To restrict the type of data SECTRACE will collect, the parameter CLASS=PTKTDATA will be used. 

Setting up a SECTRACE

From the console, set the following two SECTRACEs, issue the following commands:

For EXTRACT calls:
  sectrace set,id=trace1,trace=all,fmt=dump,TYPE=SAFP,end
  nn CAS21200 SPECIFY RACROUTE PARAMETERS, CANCEL OR END 
r nn,request=extract,class=PTKTDATA,end 
  nn CAS212210 CONTINUE SAF RACROUTE SPECIFICATIONS, CANCEL, OR END 
r nn,end 

For VERIFY calls:
  sectrace set,id=trace2,trace=all,fmt=dump,TYPE=SAFP,end
  nn CAS21200 SPECIFY RACROUTE PARAMETERS, CANCEL OR END 
r nn,request=verify,ENVIR=CREATE,PASSCHK=YES,end 
  nn CAS212210 CONTINUE SAF RACROUTE SPECIFICATIONS, CANCEL, OR END 
r nn,end 

To stop the SECTRACE, issue the following console commands:

SECTRACE DEL,ID=trace1
SECTRACE DEL,ID=trace2

By default, the SECTRACE data will be recorded on active SMF dataset. For more information about SECTRACE options, please refer to Trace SAF Requests document.

Running the ACFRPTST Utility

This is a sample job to run ACFRPTST:

//REPORT  EXEC PGM=ACFRPTST          
//SYSPRINT DD SYSOUT=*               
//RECMAN1  DD DISP=SHR,DSN=SYS1.MAN1 
//RECMAN2  DD DISP=SHR,DSN=SYS1.MAN2 
//RECMAN3  DD DISP=SHR,DSN=SYS1.MAN3 
//SYSIN    DD *                      
TITLE(PASSTICKET)                    
TRACEID(*)                         
DETAIL                               
/*                              

RECMAN1, RECMAN2 and RECMAN3 DDs should be the SMF datasets. The console command D SMF can be issued to make sure which are the SMF dataset names.

The generated report will be stored on the SYSPRINT DD.