CARLa and RACF superior groups tree



All about SAF, RACF, encryption, Firewall, Risk assessment and integrity concepts

CARLa and RACF superior groups tree

Postby rfeio » Tue Feb 01, 2011 7:47 pm

Hi,

I would like (if that is even possible) to list all RACF superior groups that are above a given RACF Group. I know it's possible to list all subgroups under a given RACF Group but my goal is to do the opposite and list all that are above it and are part of its "RACF Group Tree".

I'm using CARLa for this effect by the way.


Cheers!
rfeio
 
Posts: 2
Joined: Sat Jan 12, 2008 1:10 am
Has thanked: 0 time
Been thanked: 0 time

Re: CARLa and RACF superior groups tree

Postby Robert Sample » Tue Feb 01, 2011 8:59 pm

What does the CARLa manual tell you? I don't recall any previous topics on CARLa so the available expertise on this forum is likely to be low.

If the manual doesn't tell you, your best bet is probably to contact the vendor for assistance.
Robert Sample
Global moderator
 
Posts: 3719
Joined: Sat Dec 19, 2009 8:32 pm
Location: Dubuque, Iowa, USA
Has thanked: 1 time
Been thanked: 279 times

Re: CARLa and RACF superior groups tree

Postby rfeio » Tue Feb 01, 2011 9:06 pm

Hi Robert,

I don't see any reference on how to do this in the manual. You are probably right and I should contact the vendor. I was just wondering if anyone as ever came across this situation before.

Thanks!
rfeio
 
Posts: 2
Joined: Sat Jan 12, 2008 1:10 am
Has thanked: 0 time
Been thanked: 0 time

Re: CARLa and RACF superior groups tree

Postby enrico-sorichetti » Tue Feb 01, 2011 9:39 pm

I doubt that You will get anything from IBM on the issue!
search IBM redbooks for hints, for example
http://www.redbooks.ibm.com/abstracts/S ... .html?Open
( appendix B is dedicated to carla )

most probably the explosion ( top bottom reporting ) is a predefined report
the implosion ( bottom up ) you will have to write Your own

as an alternative there are quite a bit of snippets for cross referencing the RACF database
google for RACF CROSS REFERENCE

usually the normal reply to questions like the one You asked
how to use <a tool> to do something just deserves the proper answer ... RTFM
if You have chosen a tool it means that You had the competence to evaluate all the alternative
if You do not know how to do it, maybe the tool is the wrong one or You do not have the skills :D

to get better answer You should just describe the requirement
and let people advice on what they feel is the best approach
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 2994
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 164 times

Re: CARLa and RACF superior groups tree

Postby dick scherrer » Wed Feb 02, 2011 1:38 am

Hello,

This "solution" is not racf-specific, but one way we accomplished this was to run the "explosion" from top to bottom, invert the output, parse it, and build result we wanted.
Hope this helps,
d.sch.
User avatar
dick scherrer
Global moderator
 
Posts: 6268
Joined: Sat Jun 09, 2007 8:58 am
Has thanked: 3 times
Been thanked: 93 times

Re: CARLa and RACF superior groups tree

Postby angrybeaver » Sat Jan 28, 2012 4:49 am

It's not elegant but you can go into option CO.C in CONSUL and enter this then type GO on the command line (change the KEY)

newlist type=racf nopage
select class=group key=GROUPNAME
sortlist key(8) key:supgroup key:supgroup:supgroup,
key:supgroup:supgroup:supgroup,
key:supgroup:supgroup:supgroup:supgroup
angrybeaver
 
Posts: 11
Joined: Sat Jan 21, 2012 10:09 am
Has thanked: 0 time
Been thanked: 1 time


Return to Mainframe Security

 


  • Related topics
    Replies
    Views
    Last post