z/OS Security Server RACF System Programmer's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Using the SET INCLUDE function

z/OS Security Server RACF System Programmer's Guide
SA23-2287-00

The SET INCLUDE command allows you to specify a RACF® parameter member to be processed, providing you with flexibility in your configuration process. You can issue the SET INCLUDE command as a RACF operator command, to dynamically change your configuration without having to manually enter the configuration commands. Or you can issue the SET INCLUDE command from a RACF parameter library member, to cause another member to be processed.

If you are using the RACF parameter library that is shown in Figure 1, and you decide after initialization that you want NODEA to enter remote mode, you can enter the following RACF operator commands:
SET INCLUDE(02)
SET INCLUDE(03)
or
SET INCLUDE (02,03)
These commands cause RACF to process IRROPT02 and IRROPT03, configuring NODEA to communicate with NODEB and NODEC. If you decide that you want NODEA to always operate in remote node, you can add the SET INCLUDE commands to IRROPT01, as shown in Figure 1.
Figure 1. Example of a RACF parameter library for a node running in remote mode
Example of a RACF parameter library for a node running in remote mode

A parameter library member that is included in another one by way of SET INCLUDE can in turn include another one, forming a hierarchy of included members. There is no limit on the number of levels of inclusion, but an included member cannot include a member that included it, or any other higher member in the inclusion hierarchy. Without this restriction, a never-ending loop of cyclic inclusion could occur. For example, in Figure 1 you cannot code SET INCLUDE(01) in the IRROPT02 and IRROPT03 members. If you do, RACF issues an error message.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014