IBM REXX Server Setup with ACF2

Products

• ACF2
• ACF2 - MISC
• ACF2 - z/OS

Issue/Introduction

This technical document translates the RACF commands found in Planning to use system REXX into ACF2 commands.

Resolution

ACF2 command conversions for RACF commands are shown below: 

Create logonids

ACF
SET LID
INSERT AXR NAME(axr stcid) STC GROUP(groupname) UID(0) HOME(/u/axr) OMVSPGM(/bin/sh)
INSERT AXR01 GROUP(groupname) 
INSERT AXR02 GROUP(groupname) 
INSERT AXR03 GROUP(groupname) 
INSERT AXR04 GROUP(groupname) 
INSERT AXR05 GROUP(groupname) 
INSERT AXR06 GROUP(groupname) 
INSERT AXR07 GROUP(groupname) 
INSERT AXR08 GROUP(groupname)

Insert AXRUSER

AXUSER is the logonid specified in the AXUSER(userid) parm in in SYS1.PARMLIB(AXRnn) which specifies the userid used for the REXX execs when security check occurs against it.

SET LID
INSERT AXRUSER JOB RESTRICT SUBAUTH PROGRAM(xxxxx) GROUP(groupname) UID(0) HOME(/u/axruser) OMVSPGM(/bin/sh)

Define Started Task

SET CONTROL(GSO)
INSERT STC.AXR* GROUP(groupname) LOGONID(AXR) STC(AXR*) 
F ACF2,REFRESH(STC)

Define Surrogate Rules

SET RESOURCE(SUR)
$KEY(SYSREXX) TYPE(SUR)
AXR UID(UID string for AXR) ALLOW
AXRUSER UID(UID string for AXRUSER) ALLOW
F ACF2,REBUILD(SUR)