Assign default OMVSPGM & HOME pathname with logonid automatically

Products

• ACF2 - z/OS

Issue/Introduction

How to assign default OMVSPGM & HOME pathname with logonid automatically while assigning UID.

'automatically while assigning UID': If a user accesses OMVS services and does not have an OMVS user profile record, the attributes that are defined in this OMVS user profile record are used to initialize a new OMVS user profile record for the user.

Set the default values/pathname for HOME and OMVSPGM as below.

HOME(/u/users/&LID) OMVSPGM(/bin/sh)

Before Changes

1) List logonid TESTOMVS with PROFILE(ALL) - logonid doesn't have OMVS profile.

LIST TESTOMVS PROFILE(ALL)                                                   
  TESTOMVS                          TESTOMVS                                 
                       COMPANY() DEPT() IDNUM() LEVEL() LOCATION(AAAA)     
                       OLDLID() OWNER() OWNTYPE() POSITION() PROJECT() SITE()
  PWPHRASE / TESTOMVS  PWP-HST(0) PWP-MAXD(0) PWP-MIND(0)                    
                       PWP-TOD(01/11/25-01:25) PWPA1TOD(01/11/25-01:16)      
                       PWPA2TOD(01/11/25-01:25)                  

2) logonid TESTOMVS which does not have an OMVS USER Profile record, goes into OMVS

Expected Values

3) List logonid TESTOMVS with PROFILE(ALL) - logonid should populate OMVS user profile with default values

LIST TESTOMVS PROFILE(ALL)                                                   
  TESTOMVS                          TESTOMVS                                 
                       COMPANY() DEPT() IDNUM() LEVEL() LOCATION(AAAA)     
                       OLDLID() OWNER() OWNTYPE() POSITION() PROJECT() SITE()
  PWPHRASE / TESTOMVS  PWP-HST(0) PWP-MAXD(0) PWP-MIND(0)                    
                       PWP-TOD(01/11/25-01:25) PWPA1TOD(01/11/25-01:16)      
                       PWPA2TOD(01/11/25-01:25)
  OMVS / TESTOMVS      HOME(/u/users/testomvs) OMVSPGM(/bin/sh)

Resolution

UNIXOPTS MODLUSER can be used to set default Home and OMVSPGM attribute.
MODLUSER Specifies the name of a model OMVS user profile record that defines attributes for UNIX System Services (OMVS). If a user accesses OMVS services and does not have an OMVS user profile record, the attributes that are defined in this OMVS user profile record are used to initialize a new OMVS user profile record for the user.

SET C(GSO)
CHANGE UNIXOPTS MODLUSER(MOD1USER)
F ACF2,REFRESH(UNIXOPTS)

SET P(USER) DIV(OMVS)
INSERT MOD1USER HOME(/u/users/&LID) OMVSPGM(/bin/sh)
F ACF2,REBUILD(USR),CLASS(P),DIVISION(OMVS) 

&LID can be used as one or more of the qualifiers. &LID represents the logonid of the user who is requesting the access. &LID cannot be used with any other characters in a single qualifier, it must be used alone as the entire qualifier. &LID is only usable in data set access rules and as a symbolic value (&LID) in the HOME field of the OMVS user profile record.

Please note, only attributes from the model user profile record (such as HOME, PROGRAM) are used to initialize the new user profile record. A new OMVS group profile record is not initialized with information from a corresponding OMVS group profile record that might exist for the model user.

Post implementation, SHOW UNIXOPTS will show as below. 

 -- UNIXOPTS OPENEDITION/MVS/UNIX SYSTEM SERVICES (USS) SUMMARY    
 OMVS DEFAULT USER: NONE                                           
 OMVS DEFAULT GROUP: NONE                                          
 MAX NUMBER OF OMVS GROUPS: 300                                    
 HFS SECURITY ACTIVE: NO                                           
 HFSACL ACTIVE: NO                                                 
 FILE.GROUPOWNER.SETGID ACTIVE: NO                                 
 OMVS MODEL USER: MOD1USER                                         
 BPX.UNIQUE.USER ACTIVE: YES                                       
 BPX.NEXT.USER ACTIVE: YES      AUTOIDOM SYSID: SYSX               
 FSACCESS CHECKING: NO                                             
 DENY EXECUTION IF FILE HAS NO EXECUTE PERMISSIONS: NO             
 TRACE USE OF BPX.DEFAULT.USER UID AND GID: NO                     
                                                                   
   -- AUDIT FLAG STATUS --                                         
 CHOWN_RESTRICTED: NO                                              
 DIRACC_ACTIVE:    YES                                             
 DIRSRCH_ACTIVE:   YES                                             
 FSOBJ_ACTIVE:     YES                                             
 FSSEC_ACTIVE:     NO                                              
 IPCOBJ_ACTIVE:    NO                                              
 PROCACT_ACTIVE:   NO                                              
 PROCESS_ACTIVE:   NO                                              
                                                                   
 RESERVED:        YES                                              
                                                                   
 RESERVED:        YES