How are the cleanup and contingency command files used to perform the actual cleanup or recovery?
Article ID: 54949
Updated On:
Products
Issue/Introduction
Description:
The IBM program IKJEFT01 should be used to process the cleanup files created by running the eTrust CleanUp report program.
Solution:
The IBM program IKJEFT01 is a TSO/E program which is used to perform TSO functions in a batch job. It can be used to perform the cleanup or recovery of ACF2 rules or logonids by pointing the //SYSTSIN DD to the command files that are generated by the eTrust CleanUp report utility ETCL#RPT. Sample IKJEFT01 JCL can be found in the eTrust CleanUp SAMPJCL member DBRPTCMD.
SAMPJCL Member DBRPTCMD
//DBRPTCMD JOB ACCT,REPORT,CLASS=A,MSGCLASS=X //*------------------------------------------------------------------- //* //* ETRUST CLEANUP R12 FOR CA-ACF2 SECURITY //* COPYRIGHT (C) 2006 CA. //* ALL RIGHTS RESERVED. //* //* MEMBER: DBRPTCMD //* //* FUNCTION: //* //* THIS SAMPLE JOB CAN BE USED TO PROCESS THE COMMAND FILES //* GENERATED BY THE ETCL#RPT UTILITY. //* //* BEFORE SUBMITTING THIS JOB, MAKE THE FOLLOWING ADJUSTMENTS: //* //* 1. CONFIGURE THE ABOVE JOBCARD TO MEET YOUR LOCAL REQUIREMENTS. //* //* 2. CHANGE ALL OCCURRENCES OF "CAI" AND "CAI.ETCL" //* TO NAME APPROPRIATE DATASET NAMES. //* //*------------------------------------------------------------------- //S1 EXEC PGM=IKJEFT01,REGION=4M //SYSTSPRT DD SYSOUT=* //* //* SYSPROC IS NEEDED FOR THE ETCLNRUL COMMAND //* //SYSPROC DD DISP=SHR,DSN=CAI.CAIEXEC //* //* POINT SYSTSIN TO YOUR GENERATED COMMAND FILE //* //SYSTSIN DD DSN=CAI.ETCL.CMDS,DISP=SHR
The input files for IKJEFT01 are created when you run the ETCL#RPT program which allocates them as //CMDS DD and //BACKOUT DD as shown in step S3 in the eTrust CleanUp SAMPJCL member DBRPTC.
The //CMDS DD contains all the input commands for ACF2 to update its databases with the eTrust cleanup recommendations.
The //BACKOUT DD contains all the input commands for ACF2 that are required to backout any commands entered from the //CMDS DD that may have resulted in an error.
SAMPJCL Member DBRPTC
//DBRPTC JOB ACCT,REPORT,CLASS=A,MSGCLASS=X //*------------------------------------------------------------------- //* //* ETRUST CLEANUP R12 FOR CA-ACF2 SECURITY //* COPYRIGHT (C) 2006 CA. //* ALL RIGHTS RESERVED. //* //* MEMBER: DBRPTC //* //* FUNCTION: //* //* THIS SAMPLE JOB CAN BE USED TO REPORT ON THE ETRUST CLEANUP //* DATABASE AND BUILD COMMAND FILES TO REMOVE UNUSED SECURITY //* FILE ENTRIES. //* //* THE FIRST STEP REFRESHES THE ETRUST CLEANUP DATABASE SO THAT //* OBSOLETE ENTRIES ARE REMOVED BEFORE COMMAND GENERATION. //* //* USE SAMPJCL(DBRPTCMD) TO PROCESS THE GENERATED ETCLNRUL //* COMMANDS. //* //* BEFORE SUBMITTING THIS JOB, MAKE THE FOLLOWING ADJUSTMENTS: //* //* 1. CONFIGURE THE ABOVE JOBCARD TO MEET YOUR LOCAL REQUIREMENTS. //* //* 2. CHANGE "CAI.ETCL.DB" TO INDICATE THE DATA SET NAME OF YOUR //* ETRUST CLEANUP TRACKING DATABASE. //* //* 3. CHANGE ALL OCCURRENCES OF "??????" //* TO NAME AN APPROPRIATE VOLUME FOR OUTPUT DATASETS. //* //* 4. UPDATE THE PARM= STATEMENT TO INDICATE YOUR THRESHOLD NUMBER //* OF DAYS FOR SELECTING EITHER REFERENCED OR UNREFERENCED ITEMS. //* FOR EXAMPLE, CODE PARM='REF=5' TO REPORT ITEMS REFERENCED //* WITHIN THE PAST 5 DAYS. CODE PARM='UNREF=30' TO REPORT ITEMS //* UNREFERENCED OVER 30 DAYS. //*------------------------------------------------------------------- //S1 EXEC PGM=ETCL#DBU,REGION=4M //SYSPRINT DD SYSOUT=* //SYSOUT DD DUMMY //SORTWK01 DD UNIT=3390,SPACE=(CYL,15) //SORTWK02 DD UNIT=3390,SPACE=(CYL,15) //* //DBASE DD DSN=CAI.ETCL.DB,DISP=SHR //DBBACKUP DD UNIT=SYSDA,SPACE=(CYL,(50,50),RLSE) //* //SYSIN DD * *RELOAD* REFRESH THE DATABASE /* //*------------------------------------------------------------------- // IF (RC = 0) THEN //*------------------------------------------------------------------- //S2 EXEC PGM=IDCAMS //SYSPRINT DD DUMMY //SYSIN DD * DELETE CAI.ETCL.CMDS DELETE CAI.ETCL.BACKOUT SET MAXCC = 0 //*-------------------------------------------------------------------- //S3 EXEC PGM=ETCL#RPT,REGION=4M,PARM='UNREF=15' //DBASE DD DISP=SHR,DSN=CAI.ETCL.DB //* //SYSPRINT DD SYSOUT=* //SYSOUT DD DUMMY //SORTWK01 DD UNIT=3390,SPACE=(CYL,15) //SORTWK02 DD UNIT=3390,SPACE=(CYL,15) //* //CMDS DD DSN=CAI.ETCL.CMDS, // DISP=(,CATLG),SPACE=(CYL,(5,5),RLSE),UNIT=SYSDA, // DCB=(RECFM=FB,LRECL=80,BLKSIZE=0),VOL=SER=?????? //* //BACKOUT DD DSN=CAI.ETCL.BACKOUT, // DISP=(,CATLG),SPACE=(CYL,(5,5),RLSE),UNIT=SYSDA, // DCB=(RECFM=FB,LRECL=80,BLKSIZE=0),VOL=SER=?????? //*-------------------------------------------------------------------- // ENDIF //*--------------------------------------------------------------------
Please also note that only IKJEFT01 should be used to make the updates to ACF2 - ACFBATCH should not be used.
Environment
Component: ETCLNA
Feedback
