Cleanup and contingency command files used to perform actual cleanup or recovery

Products

• Cleanup

Issue/Introduction

The IBM program IKJEFT01 should be used to process the cleanup files created by running the Cleanup report program.

Resolution

The IBM program IKJEFT01 is a TSO/E program which is used to perform TSO functions in a batch job. It can be used to perform the cleanup or recovery of ACF2 rules or logonids  by pointing the //SYSTSIN   DD to the command files that are generated by the Cleanup report utility ETCL#RPT. Sample IKJEFT01 JCL can be found in the Cleanup SAMPJCL member DBRPTCMD.

SAMPJCL Member DBRPTCMD

//DBRPTCMD  JOB ACCT,REPORT,CLASS=A,MSGCLASS=X                        
//*-------------------------------------------------------------------
//*                                                                   
//*  ETRUST CLEANUP R12 FOR CA-ACF2 SECURITY                          
//*  COPYRIGHT (C) 2006 CA.                                           
//*  ALL RIGHTS RESERVED.                                             
//*                                                                   
//*  MEMBER:  DBRPTCMD                                                
//*                                                                   
//*  FUNCTION:                                                        
//*                                                                   
//*  THIS SAMPLE JOB CAN BE USED TO PROCESS THE COMMAND FILES         
//*  GENERATED BY THE ETCL#RPT UTILITY.                               
//*                                                                   
//*  BEFORE SUBMITTING THIS JOB, MAKE THE FOLLOWING ADJUSTMENTS:      
//*                                                                   
//*   1. CONFIGURE THE ABOVE JOBCARD TO MEET YOUR LOCAL REQUIREMENTS. 
//*                                                                   
//*   2. CHANGE ALL OCCURRENCES OF "CAI" AND "CAI.ETCL"               
//*      TO NAME APPROPRIATE DATASET NAMES.                           
//*                                                                   
//*-------------------------------------------------------------------
//S1      EXEC PGM=IKJEFT01,REGION=4M                                 
//SYSTSPRT  DD SYSOUT=*                                               
//*                                                                   
//* SYSPROC IS NEEDED FOR THE ETCLNRUL COMMAND                        
//*                                                                   
//SYSPROC   DD DISP=SHR,DSN=CAI.CAIEXEC                               
//*                                                                   
//* POINT SYSTSIN TO YOUR GENERATED COMMAND FILE                      
//*                                                                   
//SYSTSIN   DD DSN=CAI.ETCL.CMDS,DISP=SHR

The input files for IKJEFT01 are created when you run the ETCL#RPT program which allocates them as //CMDS DD and //BACKOUT DD as shown in step S3 in the Cleanup SAMPJCL member DBRPTC.

The //CMDS DD contains all the input commands for ACF2 to update its databases with the Cleanup recommendations.

The //BACKOUT DD contains all the input commands for ACF2 that are required to backout any commands entered from the //CMDS DD that may have resulted in an error.

SAMPJCL Member DBRPTC

//DBRPTC    JOB ACCT,REPORT,CLASS=A,MSGCLASS=X                             
//*-------------------------------------------------------------------     
//*                                                                        
//*  ETRUST CLEANUP R12 FOR CA-ACF2 SECURITY                               
//*  COPYRIGHT (C) 2006 CA.                                                
//*  ALL RIGHTS RESERVED.                                                  
//*                                                                        
//*  MEMBER:  DBRPTC                                                       
//*                                                                        
//*  FUNCTION:                                                             
//*                                                                        
//*  THIS SAMPLE JOB CAN BE USED TO REPORT ON THE ETRUST CLEANUP           
//*  DATABASE AND BUILD COMMAND FILES TO REMOVE UNUSED SECURITY            
//*  FILE ENTRIES.                                                         
//*                                                                        
//*  THE FIRST STEP REFRESHES THE ETRUST CLEANUP DATABASE SO THAT          
//*  OBSOLETE ENTRIES ARE REMOVED BEFORE COMMAND GENERATION.               
//*                                                                        
//*  USE SAMPJCL(DBRPTCMD) TO PROCESS THE GENERATED ETCLNRUL               
//*  COMMANDS.                                                             
//*                                                                        
//*  BEFORE SUBMITTING THIS JOB, MAKE THE FOLLOWING ADJUSTMENTS:           
//*                                                                        
//*   1. CONFIGURE THE ABOVE JOBCARD TO MEET YOUR LOCAL REQUIREMENTS.      
//*                                                                        
//*   2. CHANGE "CAI.ETCL.DB" TO INDICATE THE DATA SET NAME OF YOUR        
//*      ETRUST CLEANUP TRACKING DATABASE.                                 
//*                                                                        
//*   3. CHANGE ALL OCCURRENCES OF "??????"                                
//*      TO NAME AN APPROPRIATE VOLUME FOR OUTPUT DATASETS.                
//*                                                                        
//*   4. UPDATE THE PARM= STATEMENT TO INDICATE YOUR THRESHOLD NUMBER      
//*      OF DAYS FOR SELECTING EITHER REFERENCED OR UNREFERENCED ITEMS.    
//*      FOR EXAMPLE, CODE PARM='REF=5' TO REPORT ITEMS REFERENCED         
//*      WITHIN THE PAST 5 DAYS.  CODE PARM='UNREF=30' TO REPORT ITEMS     
//*      UNREFERENCED OVER 30 DAYS.                                        
//*-------------------------------------------------------------------     
//S1      EXEC PGM=ETCL#DBU,REGION=4M                                         
//SYSPRINT  DD SYSOUT=*                                                       
//SYSOUT    DD DUMMY                                                          
//SORTWK01  DD UNIT=3390,SPACE=(CYL,15)                                       
//SORTWK02  DD UNIT=3390,SPACE=(CYL,15)                                       
//*                                                                           
//DBASE     DD DSN=CAI.ETCL.DB,DISP=SHR                                       
//DBBACKUP  DD UNIT=SYSDA,SPACE=(CYL,(50,50),RLSE)                            
//*                                                                           
//SYSIN     DD *                                                              
*RELOAD*                     REFRESH THE DATABASE                             
/*                                                                            
//*-------------------------------------------------------------------        
//   IF (RC = 0) THEN                                                         
//*-------------------------------------------------------------------        
//S2      EXEC PGM=IDCAMS                                                     
//SYSPRINT  DD DUMMY                                                          
//SYSIN     DD *                                                              
 DELETE CAI.ETCL.CMDS                                                         
 DELETE CAI.ETCL.BACKOUT                                                      
 SET MAXCC = 0                                                                
//*--------------------------------------------------------------------       
//S3      EXEC PGM=ETCL#RPT,REGION=4M,PARM='UNREF=15'                         
//DBASE     DD DISP=SHR,DSN=CAI.ETCL.DB                                       
//*                                                                           
//SYSPRINT  DD SYSOUT=*                                                       
//SYSOUT    DD DUMMY                                                          
//SORTWK01  DD UNIT=3390,SPACE=(CYL,15)                                       
//SORTWK02  DD UNIT=3390,SPACE=(CYL,15)                                       
//*                                                                           
//CMDS      DD DSN=CAI.ETCL.CMDS,                                             
//             DISP=(,CATLG),SPACE=(CYL,(5,5),RLSE),UNIT=SYSDA,               
//             DCB=(RECFM=FB,LRECL=80,BLKSIZE=0),VOL=SER=??????               
//*                                                                           
//BACKOUT   DD DSN=CAI.ETCL.BACKOUT,                                          
//             DISP=(,CATLG),SPACE=(CYL,(5,5),RLSE),UNIT=SYSDA,               
//             DCB=(RECFM=FB,LRECL=80,BLKSIZE=0),VOL=SER=??????               
//*--------------------------------------------------------------------       
//   ENDIF                                                                   
//*--------------------------------------------------------------------

NOTE: Only IKJEFT01 should be used to make the updates to ACF2. ACFBATCH should not be used.