Are there any sample reports for CA Cleanup for ACF2?

Products

• Cleanup

Issue/Introduction

Description:

Are there any sample reports for CA Cleanup for ACF2?

• What can be done with these samples?
  
  
• Is there a way to customize the reports?

Solution:

Yes, the SAMPJCL library contains some sample JCL to run reports. These are only samples. They must be modified to meet your shop standards.

• DBRPT - THIS SAMPLE JOB CAN BE USED TO REPORT ON THE CLEANUP DATABASE.
  
  
  • CHANGE "CAI.ETCL.DB" TO INDICATE THE DATA SET NAME OF YOUR CLEANUP TRACKING DATABASE.
    
    
  • UPDATE THE PARM= STATEMENT TO INDICATE YOUR THRESHOLD NUMBER OF DAYS FOR SELECTING EITHER REFERENCED OR UNREFERENCED ITEMS. FOR EXAMPLE, CODE PARM='REF=5' TO REPORT ITEMS REFERENCED WITHIN THE PAST 5 DAYS. CODE PARM='UNREF=30' TO REPORT ITEMS UNREFERENCED OVER 30 DAYS. PARM='BOTH' REPORTS THE ENTIRE TRACKING FILE, BOTH REFERENCED AND UNREFERENCED ITEMS, WITHOUT PRODUCING COMMANDS.
    
    
  • TO GENERATE A SELECTIVE REPORT, ADD AN INCLUDE STATEMENT SPECIFYING THOSE ENTRIES YOU WANT REPORTED, OR, ADD AN EXCLUDE STATEMENT SPECIFYING THOSE ENTRIES YOU DO NOT WANT REPORTED.
    
    EXAMPLE INCLUDE STATEMENT:

      //INCLUDE DD *  USERID1  $KEY(RULE1)  CLASS(RCKC)  /*

    EXAMPLE EXCLUDE STATEMENT:

      //EXCLUDE DD *  USERID2  CLASS(DSN) NAME(SYS)  CLASS(RFAC)  /*

• DBRPTC - THIS SAMPLE JOB CAN BE USED TO REPORT ON THE CLEANUP DATABASE AND BUILD COMMAND FILES TO REMOVE UNUSED SECURITY FILE ENTRIES. THE FIRST STEP REFRESHES THE ETRUST CLEANUP DATABASE SO THAT OBSOLETE ENTRIES ARE REMOVED BEFORE COMMAND GENERATION. USE SAMPJCL(DBRPTCMD) TO PROCESS THE GENERATED ETCLNRUL COMMANDS.
  
  
  • CHANGE "CAI.ETCL.DB" TO INDICATE THE DATA SET NAME OF YOUR ETRUST CLEANUP TRACKING DATABASE.
    
    
  • CHANGE ALL OCCURRENCES OF "??????" TO NAME AN APPROPRIATE VOLUME FOR OUTPUT DATASETS.
    
    
  • UPDATE THE PARM= STATEMENT TO INDICATE YOUR THRESHOLD NUMBER OF DAYS FOR SELECTING EITHER REFERENCED OR UNREFERENCED ITEMS. FOR EXAMPLE, CODE PARM='REF=5' TO REPORT ITEMS REFERENCED WITHIN THE PAST 5 DAYS. CODE PARM='UNREF=30' TO REPORT ITEMS UNREFERENCED OVER 30 DAYS.
  
  
  
• DBRPTCMD - THIS SAMPLE JOB CAN BE USED TO PROCESS THE COMMAND FILES GENERATED BY THE ETCL#RPT UTILITY.
  
  
  • CHANGE ALL OCCURRENCES OF "CAI" AND "CAI.ETCL" TO NAME APPROPRIATE
  
  
  
• DBRPT01 - THIS SAMPLE JOB ALLOWS CLEANUP REPORTING ON A USER AND ALL RULE LINES THAT SPECIFICALLY MATCH THAT USER.
  
  
  • LOGONIDS AND RULES ARE SELECTED BY EXECUTING ONE OR MORE ACF SET AND LIST COMMANDS THAT ARE READ FROM ACFCMD. AN EXAMPLE OF ACFCMD INPUT:

      SET LID  LIST IF(TSO)  LIST LIKE(ZZ-)  SET RULE  LIST LIKE(SYS-)  SET R(CKC)  LIST LIKE(-)

  • THE OUTPUT OF THE COMMANDS IS PROCESSED TO EXTRACT EACH LOGONID OR RULE KEY LISTED. EACH ENTRY IS COMPARED AGAINST A LIST OF ENTRIES TO BE EXCLUDED FROM PROCESSING. ALL ELIGIBLE ENTRIES ARE OUTPUT. AN EXAMPLE OF EXCLUDE INPUT:

      LOGONID1  $KEY(SYS1)  $KEY(CEMT) T(CKC)

  • CHANGE ALL OCCURRENCES OF "CAI" AND "CAI.ETCL" TO NAME APPROPRIATE DATASET NAMES.
    
    
  • ADD SELECTION AND EXCLUDE CRITERIA IN ACFMCD AND EXCLUDE.
    
    
  • CHANGE THE UNREF= PARAMETER TO AN APPROPRIATE THRESHOLD.
  
  
  
• DBRPT02 - GENERATE A LISTING OF LOGONIDS AND/OR RULES THAT CAN BE READ BY ETCL#RPT AS INPUT.
  
  
  • CHANGE THE FOLLOWING XXXX TO THE REQUESTED LOGONID:
    
    SET LID=XXXX
    
    
  • CHANGE THE FOLLOWING XX TO THE REPORTING THRESHOLD IN DAYS (SPECIFY UNREF=ALL TO PERFORM A COMPLETE CLEANUP):
    
    SET UNREF=XX
    
    
  • CHANGE ALL OCCURRENCES OF "CAI" AND "CAI.ETCL" TO NAME APPROPRIATE DATASET NAMES.
    
    
  • ADD EDIT REXX EXEC "ETCL#X02" TO SPECIFY THE LOGONID POSITION AND LENGTH WITHIN THE UIDSTRING.
    
    
  • CHANGE THE UNREF= PARAMETER TO AN APPROPRIATE THRESHOLD.
  
  
  
• DBRPT03 - THIS SAMPLE JOB WILL "CLONE" A USER BASED UPON THE REFERENCED RESOURCES OF ANOTHER USER.
  
  
  • CHANGE THE FOLLOWING TO THE REQUESTED LOGONIDS:
    
    SET OLDLID=XXXX
    SET NEWLID=XXXX
    
    
  • CHANGE THE FOLLOWING OPTIONAL PARAMETER, IF DESIRED, TO SPECIFY NOPROF=NOPROF TO SUPPRESS THE CLONING OF USER PROFILE RECORDS:
    
    SET NOPROF=
    
    
  • CHANGE THE FOLLOWING XX TO THE REPORTING THRESHOLD IN DAYS OR SPECIFY REF=ALL TO PERFORM A COMPLETE CLONING OF BOTH REFERENCED AND UNREFERENCED RESOURCES:
    
    SET REF=XX
    
    
  • CHANGE ALL OCCURRENCES OF "CAI" AND "CAI.ETCL" TO NAME APPROPRIATE DATASET NAMES.
    
    
  • EDIT REXX EXEC "ETCL#X02" AND "ETCL#X03" TO SPECIFY THE LOGONID POSITION AND LENGTH WITHIN THE UIDSTRING.

Yes, you can customize any of the ACF2/Cleanup reports.

• To create a custom report, add an //UNLOAD DD statement to your JCL. This file can then be fed into a report product, such as CA-EASYTRIEVE to customize. The DCB information is not needed for the file creation, just the dataset name, space, volume, etc. See Appendix B of the Implementation Guide for the layout of the userid, dataset, and resource files.

Environment

Release:
Component: ETCLNA