MVSFORUMS.com Forum Index MVSFORUMS.com
A Community of and for MVS Professionals
 
 FAQFAQ   SearchSearch   Quick Manuals   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

System REXX Security

 
Post new topic   Reply to topic   printer-friendly view    MVSFORUMS.com Forum Index -> TSO and ISPF
View previous topic :: View next topic  
Author Message
djf
Beginner


Joined: 06 Feb 2007
Posts: 68
Topics: 27

PostPosted: Tue Mar 31, 2009 9:44 pm    Post subject: System REXX Security Reply with quote

Anyone know of any complete descriptions of how to set up security for System Rexx? I find bits and pieces here and there but no one stop solution.

RACF instructions would be helpfull, but if it was in ACF2 that would be better.
Back to top
View user's profile Send private message
taltyman
JCL Forum Moderator
JCL Forum Moderator


Joined: 02 Dec 2002
Posts: 310
Topics: 8
Location: Texas

PostPosted: Wed Apr 01, 2009 4:49 pm    Post subject: Reply with quote

I don't know ACF2 but here's the RACF instructions I used.
Code:
// EXEC PGM=IKJEFT01,DYNAMNBR=20                                         
//SYSPRINT  DD SYSOUT=*                                                   
//SYSIN     DD DUMMY                                                     
//SYSTSIN   DD *                                                         
AU AXRUSER NAME('SYSTEM REXX DEFAULT USERID') DFLTGRP(STCGRP) NOPASSWORD 
RDEFINE SURROGAT SYSREXX.AXRUSER UACC(NONE)                               
SETROPTS GENERIC (SURROGAT) REFRESH                                       
PERMIT SYSREXX.AXRUSER CL(SURROGAT) ACCESS(ALTER) ID(AXRUSER)             
//SYSTSPRT  DD SYSOUT=*                                                   


And in parmlib member AXR00 I used this statement to point to the userid AXRUSER.

Code:
AXRUSER(AXRUSER)        /* ?AXREXX security=axruser results in the     
                           exec running in a security environment       
                           defined by the userid AXRUSER           */   


I think it will run with the callers ID and permission when possible and then use this ID when it is unable to. That's off the top of my head without going back and reading the doc.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic   printer-friendly view    MVSFORUMS.com Forum Index -> TSO and ISPF All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


MVSFORUMS
Powered by phpBB © 2001, 2005 phpBB Group