z/OS Security Server RACF System Programmer's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Automatically processing a parameter library member during initialization

z/OS Security Server RACF System Programmer's Guide
SA23-2287-00

You can specify a member of the RACF® parameter library to be automatically processed by the RACF initialization routine as part of the RACF subsystem address space initialization and program startup. The contents of this member are read by RACF and normally contain the RACF commands to configure the RRSF network from the local node's point of view.

Note: If you specify SMS workspace information for any node, there might be a delay during the processing of the parameter library member if the SMS address space is not initialized.

Specify the name of the RACF parameter library partitioned data set on the RACFPARM DD statement in the RACF procedure in SYS1.PROCLIB.

Restriction: You cannot concatenate data sets under the RACFPARM DD name. If your JCL specifies concatenated data sets for RACFPARM, they are ignored.

You can use SYS1.PARMLIB for the RACF parameter library. However, it is likely that different sets of users will need update authority to SYS1.PARMLIB and the RACF parameter library, and in these cases you should use different data sets.

Specify the RACF parameter library member to be processed by specifying its suffix on the PARM='OPT=xx' parameter on the EXEC statement in the RACF procedure in SYS1.PROCLIB. If you do not specify a suffix, it defaults to 00. (See Parameter library member names for information on the format of parameter library member names.)

After you update the RACF parameter library and the RACFPARM DD statement, if you want the configuration to take effect immediately do one of the following:
  • Re-IPL MVS™.
  • Stop and restart the RACF subsystem address space, as shown:
    subsystem_prefixSTOP
    START subsystem-name,SUB=MSTR

Figure 1 shows an example of a parameter library member that is automatically processed during initialization. In this case, the parameter library member IRROPT01 is processed to configure the local node, but no remote nodes are configured. Therefore, after initialization, NODEA is in local mode. Two other parameter library members, IRROPT02 and IRROPT03, exist but are not processed.

Figure 1. Example of a RACF parameter library for a node running in local mode
Example of a RACF parameter library for a node running in local mode

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014