Questions about size of ACF2 database structures

Products

• ACF2 - z/OS

Issue/Introduction

What are the limits for ACF2 in terms of:

- Number of users
- Number of groups that can be defined
- Number of groups that can be connected to a user
- Maximum size of the ACF2 Database

 

Environment

Release : 16.0

Resolution

The limits of ACF2 as explained below: 

Number of users: 
The only limitation on the number or users is the size of the LOGONID database.
The LOGONID database is a KSDS VSAM cluster.

Number of groups that can be defined:
The only limitation on the number of groups that can be defined is the size of the INFOSTG database.
Group records are defined as resource rules in TYPE(TGR).
 
Number of groups that can be connected to a user:
The maximum number of groups that can be connected to a user is set in the Control(GSO) UNIXOPTS record. NGHROUPS parameter: 

NGROUPS(300|nnnn)

Specifies the maximum number of supplemental groups supported.
The maximum value that can be specified is 8192. The default is 300.

WARNING
Increasing NGROUPS to a value higher than 300 is not recommended because IBM's MVS UNIX processing restricts the NGROUPS_MAX variable to 300 in accordance with POSIX standards.

Maximum size of the ACF2 Database: 

There are 3 ACF2 Databases:
LOGONIDS
INFOSTG
RULES

All 3 are only limited by the DASD space that you have available. Restricted only by the IBM rules for KSDS VSAM cluster allocations.