Activating and deactivating RRSF functions

The RACF® SET command activates and deactivates RRSF functions on the local node. Use the AUTODIRECT keyword to activate automatic direction of commands. Use the AUTOPWD keyword to activate automatic direction of passwords. Use the PWSYNC keyword to activate password synchronization. Use the AUTOAPPL keyword to activate automatic direction of application updates. Before you issue the SET command to activate these functions, define profiles in the RRSFDATA class to control:

Which commands or application updates are automatically directed and to which remote nodes
Which users' password and password phrase changes are to be synchronized
Which users' password and password phrase changes are automatically directed and to which remote nodes

If the RRSFDATA class is not active, no password or password phrase changes are synchronized with other user IDs, even if password synchronization was activated with the SET PWSYNC command. Similarly, if the RRSFDATA class is not active, no commands, application updates, or password changes are automatically directed even if the function was activated by way of the SET command.

Use the OUTPUT and NOOUTPUT subkeywords on the AUTODIRECT, AUTOPWD, PWSYNC, or AUTOAPPL keywords to specify whether output, warning messages, and error messages from RRSF functions are sent to anyone. If you specify OUTPUT, you can specify a list of users to whom the output is sent and under what conditions. RACF puts the output in the RRSFLIST data sets of the users.

Use the NOTIFY and NONOTIFY subkeywords on the AUTODIRECT, AUTOPWD, PWSYNC, or AUTOAPPL keywords to specify whether RACF should issue TSO SEND commands indicating whether the RRSF functions were successful or unsuccessful. If you specify NOTIFY, you can specify a list of users to whom the notification is sent and under what conditions.

The SET command also deactivates RRSF functions. Use the NOAUTODIRECT keyword to deactivate automatic direction of commands. Use the NOAUTOPWD keyword to deactivate automatic direction of passwords. Use the NOPWSYNC keyword to deactivate password synchronization. Use the NOAUTOAPPL keyword to deactivate automatic direction of application updates.

For more information about the SET command and controlling RRSF functions, see z/OS Security Server RACF Security Administrator's Guide.