IBM GC28-1920-01 user manual

Summary of the content on the page No. 1

OS/390 IBM
Security Server (RACF)
Planning: Installation and Migration
Place graphic in this
area. Outline is
keyline only. DO NOT PRINT.



GC28-1920-01

Summary of the content on the page No. 2

Summary of the content on the page No. 3

OS/390 IBM Security Server (RACF) Planning: Installation and Migration GC28-1920-01

Summary of the content on the page No. 4

Note Before using this information and the product it supports, be sure to read the general information under “Notices” on page xi. Second Edition, September 1996 This is a major revision of GC28-1920-00. This edition applies to Version 1 Release 2 of OS/390 (5645-001) and to all subsequent releases and modifications until otherwise indicated in new editions. Order publications through your IBM representative or the IBM branch office serving your locality. Publications are not stocked at

Summary of the content on the page No. 5

iii

Summary of the content on the page No. 6

iv OS/390 V1R2.0 Security Server (RACF) Planning: Installation and Migration

Summary of the content on the page No. 7

Contents Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi Trademarks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii About This Book ................................... xiii Who Should Use This Book .............................. xiii How to Use This Book ................................. xiii Where to Find More Information ........................... xiv Softcopy Publications . . . . . . . . . . . . . . . . .

Summary of the content on the page No. 8

Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Panels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Publications Library . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Routines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 SYS1.SAMPLIB . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 Templates . . . . . . . . . . . .

Summary of the content on the page No. 9

Chapter 9. Operational Considerations . . . . . . . . . . . . . . . . . . . . . 49 Enhancements to the RESTART Command .................... 49 Enabling and Disabling RACF ............................ 49 Chapter 10. Application Development Considerations ............ 51 Year 2000 Support ................................... 51 OS/390 OpenEdition DCE Application Servers ................... 51 New Application Services and Security ...................... 52 New Application Authorization Service

Summary of the content on the page No. 10

viii OS/390 V1R2.0 Security Server (RACF) Planning: Installation and Migration

Summary of the content on the page No. 11

Figures 1. Function Shipped In OS/390 Release 1 Security Server (RACF) ...... 5 2. Function Introduced After the Availability of OS/390 Release 1 Security Server (RACF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 3. Function Introduced In OS/390 Release 2 Security Server (RACF) ..... 6 4. Function Not Shipped In OS/390 Release 2 Security Server (RACF) ... 6 5. Function Not Upgraded ............................. 12 6. New Classes . . . . . . . . . . . . . . . .

Summary of the content on the page No. 12

x OS/390 V1R2.0 Security Server (RACF) Planning: Installation and Migration

Summary of the content on the page No. 13

Notices References in this publication to IBM products, programs, or services do not imply that IBM intends to make these available in all countries in which IBM operates. Any reference to an IBM product, program, or service is not intended to state or imply that only IBM's product, program or service may be used. A functionally equivalent product, program, or service which does not infringe on any of IBM's intellectual property rights may be used instead of the IBM product, program or se

Summary of the content on the page No. 14

Trademarks The following terms are trademarks of the IBM Corporation in the United States or other countries or both: Ÿ AS/400 Ÿ BookManager Ÿ CICS Ÿ CICS/ESA Ÿ DB2 Ÿ DFSMS Ÿ DFSMS/MVS Ÿ IBM Ÿ IBMLink Ÿ IMS Ÿ Library Reader Ÿ MVS Ÿ MVS/ESA Ÿ MVS/XA Ÿ NetView Ÿ OpenEdition Ÿ OS/2 Ÿ OS/390 Ÿ Parallel Sysplex Ÿ RACF Ÿ RETAIN Ÿ SOM Ÿ SOMobjects Ÿ SystemView Ÿ S/390 Ÿ System/390 Ÿ TalkLink Ÿ VM/ESA Ÿ VM/XA UNIX is a registered trademark in the United States and oth

Summary of the content on the page No. 15

About This Book This book contains information about the Resource Access Control Facility (RACF), which is part of the OS/390 Security Server. The Security Server has two components: Ÿ RACF Ÿ OpenEdition DCE Security Server For information about the OpenEdition DCE Security Server, see the publications related to that component. This book provides information to guide you through the migration process from OS/390 Release 1 Security Server (RACF) or RACF 2.2 to OS/390 Release 2 Security Ser

Summary of the content on the page No. 16

Ÿ Chapter 7, “Administration Considerations” on page 37, summarizes changes to administration procedures for the new release of RACF. Ÿ Chapter 8, “Auditing Considerations” on page 45, summarizes changes to auditing procedures for the new release of RACF. Ÿ Chapter 9, “Operational Considerations” on page 49, summarizes changes to operating procedures for the new release of RACF. Ÿ Chapter 10, “Application Development Considerations” on page 51, identifies changes in the new release of RACF

Summary of the content on the page No. 17

RACF Courses The following RACF classroom courses are also available: Ÿ Effective RACF Administration, H3927 Ÿ MVS/ESA RACF Security Topics, H3918 Ÿ Implementing RACF Security for CICS/ESA, H3992 IBM provides a variety of educational offerings for RACF. For more information on classroom courses and other offerings, see your IBM representative, IBM Mainframe Training Solutions, GR28-5467, or call 1-800-IBM-TEACH (1-800-426-8322). IBM Systems Center Publications IBM systems centers produce “

Summary of the content on the page No. 18

Other Sources of Information IBM provides customer-accessible discussion areas where RACF may be discussed by customer and IBM participants. Other information is available through the Internet. IBM Discussion Areas Two discussion areas provided by IBM are the MVSRACF discussion and the SECURITY discussion. Ÿ MVSRACF MVSRACF is available to customers through IBM's TalkLink offering. To access MVSRACF from TalkLink: 1. Select S390 (the S/390 Developers' Association) 2. Use the fastpath keywo

Summary of the content on the page No. 19

You can get sample code, internally-developed tools, and exits to help you use 1 RACF. All this code works , but is not officially supported. Each tool or sample has a README file that describes the tool or sample and any restrictions on its use. The simplest way to reach this code is through the RACF home page. From the home page, click on System/390 FTP Servers under the topic, “RACF Sample Materials.” The code is also available from lscftp.pok.ibm.com through anonymous ftp. To get access

Summary of the content on the page No. 20

Elements and Features in OS/390 You can use the following table to see the relationship of a product you are familiar with and how it is referred to in OS/390 Release 2. OS/390 Release 2 is made up of elements and features that contain function at or beyond the release level of the products listed in the following table. The table gives the name and level of each product on which an OS/390 element or feature is based, identifies the OS/390 name of the element or feature, and indicates wheth