z/OS Security Server RACF Macros and Interfaces
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Parameters

z/OS Security Server RACF Macros and Interfaces
SA23-2288-00

You can invoke IRRXUTIL using the following REXX statement:

/* REXX */
myrc=IRRXUTIL(command,type,profile,stem,prefix,generic) 
The following table defines the IRRXUTIL parameters:
Table 1. IRRXUTIL parameters
Parameter Definition
command
  • 'EXTRACT' to extract the contents of the specified profile.
  • 'EXTRACTN' to extract the contents of the profile that follows the specified profile alphabetically. This function can be used iteratively to return all profiles in a class by specifying the output profile name and generic indicator from the previous iteration as input to the subsequent iteration.
    Note: When iteratively retrieving general resource profiles starting at the beginning (specifying profile as a single blank), the discrete profiles are returned in alphabetic order, followed by the generic profiles in alphabetic order. R_admin automatically transitions from discrete profiles to generic profiles.
type The uppercase class name from which to extract the specified profile. USER, GROUP, CONNECT, _SETROPTS, and all general resource classes are supported. The DATASET class is not supported.
Note:
  1. A user-to-group connection can be extracted by specifying the CONNECT class and providing a profile name using the form userID.group-name.
  2. SETROPTS settings can be obtained by specifying "_SETROPTS" as both the class name and the profile name.
profile The profile to extract, or to be used as the basis for an EXTRACTN request.
Note: The profile name is case-sensitive. See the type parameter description for more information.
stem The REXX stem variable name to contain returned data. The stem must not exceed 32 characters or include a trailing period ("."). IRRXUTIL initializes the stem variable to null before setting fields unless the stem contains a period (".").
Note: Specifying a stem that contains a period will require some familiarity with REXX programming techniques. For details, see Specifying a period in the stem name.
prefix An optional prefix to add to all stem variable name parts other than the actual stem and the value of the variable, except when the value is a segment or field name (for example, the list of segments returned for a profile, or the list of fields associated with a segment). The prefix reduces collisions with other REXX variables that might be defined within the calling program. The prefix must not exceed 32 characters and must not contain a period.
generic An optional indicator for use with general resources. The value must be upper case “TRUE” or “FALSE”. The default value for generic is "FALSE". Depending on which value and which command is specified, generic returns different profiles:
Command Behavior
TRUE FALSE
EXTRACT Returns the profile that covers the input profile name if there is no exact match.
Note: The class must be active, and SETROPTS GENERIC must be in effect for the class, in order for a generic match to be found.
Returns R_admin “profile not found” return code combination when there is no exact match.
EXTRACTN Returns the next alphabetic generic profile in the class with respect to the input name (regardless of whether the input profile name is generic or discrete).
  • If the input profile name is discrete, returns the next alphabetic discrete profile if more discrete profiles exist, or the first alphabetic generic profile.
  • If the input profile name is generic, returns the next alphabetic generic profile.
Note: This parameter is ignored if type is not a general resource class. See z/OS Security Server RACF Callable Services for additional information.
myrc A string of 5 blank-separated return code values. See Return codes for more information.

Examples

  1. In the following example "EXTRACT" is the command, "UNIXPRIV" is the type, "SHARED.IDS" is the profile, "MYSTEM" is the stem, "R_" is the prefix, and "FALSE" is the optional indicator for the "EXTRACT" command:
    myrc=IRRXUTIL(“EXTRACT”,”UNIXPRIV”,”SHARED.IDS”,”MYSTEM”,”R_”,“FALSE”)
  2. The following example is similar to the previous example but with a stem value of "RACF_USERS" and no prefix:
    myrc=IRRXUTIL(“EXTRACT”,”UNIXPRIV”,”SHARED.IDS”,”RACF_USERS”,””,“FALSE”)
  3. You can use EXTRACTN to return the next profile alphabetically in a class. In the following example the profile after "SHARED.IDS" is returned (or an R_admin return code combination of 4/4/4 if no more profiles exist):
    myrc=IRRXUTIL(“EXTRACTN”,”UNIXPRIV”,”SHARED.IDS“,”MYSTEM”,”R_”,“FALSE”)
  4. EXTRACTN can be used to return the first profile in a class by specifying a blank for the profile name:
    myrc=IRRXUTIL(“EXTRACTN”,”UNIXPRIV”,” “,”MYSTEM”,”R_”,“FALSE”)
    The returned profile can then be used as input on a subsequent EXTRACTN request. This technique can be used iteratively to obtain all profiles in the UNIXPRIV class.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014