ACF2 equivalent to 'IBM Sample command in azfbulkcmd.sh'.
/bin/tsocmd "ALU $2 MFA(FACTOR($3) NOACTIVE NOPWFALLBACK NOTAGS)"
Where $2 would be the userid/logonid; $3 would be the MFA factor name -- variables specified as arguments on the unix command.
What is the syntax to run the same command using /bin/tsocmd in a unix shell to ACF2?
The ACF2 ACFUNIX Utility in USS can be used similar to the TSO command, but there is USS configuration that needs to be done, which consists of creating a symbolic link to find the utility and adding the directory that contains the symbolic link to the PATH:
- Create a symbolic link from the ACFUNIX load module to a USS file named acfunix from a directory that you have write access:
ln -e ACFUNIX ./acfunix
- Add the directory that contains the symbolic link to the PATH:
- Run the command from OMVS:
acfunix "list user"
As with the TSO command, you can also string multiple commands together using the MULT keyword and tilde character. For example:
acfunix "MULT set control(gso)~list opts"
acfunix "MULT set control(gso)~list opts~set lid~list user_here"
Once USS is configured the appropriate ACF commands can be issued from OMVS, for example.
Create an MFA user profile data record:
SET PROFILE(USER) DIVISION(MFA)
INSERT USER01.FACTORNAME ACTIVE TAGS(TSTUSERID:BobS)
acfunix "MULT SET PROFILE(USER) DIVISION(MFA)~INSERT USER01.FACTORNAME ACTIVE TAGS(TSTUSERID:BobS)"
To allow or prevent password fallback during factor authentication downtime, issue the following command:
CHANGE userid FALLBACK|NOFALLBACK
acfunix "acfunix "CHANGE userid NOFALLBACK"