To activate LDAP change notification, define RACFEVNT class resources
for the notifications you want and then activate the RACFEVNT class.
(You need not define resources in the LDAPBIND class to enable LDAP
change notifications.)
- Define the RACFEVNT class resources for the LDAP
notifications you want by creating one or more discrete profiles or
by creating a generic profile.
There are two ways you might activate all supported
LDAP notification types: defining multiple discrete profiles or defining
one generic profile. Otherwise, define a subset of resources based
on the LDAP notifications you want.
Example showing multiple
discrete profiles:
RDEFINE RACFEVNT NOTIFY.LDAP.USER
RDEFINE RACFEVNT NOTIFY.LDAP.GROUP
RDEFINE RACFEVNT NOTIFY.LDAP.CONNECT
RDEFINE RACFEVNT NOTIFY.LDAP.FACILITY
Example
showing a generic profile:
SETROPTS GENERIC(RACFEVNT)
RDEFINE RACFEVNT NOTIFY.LDAP.*
You might also define
a generic profile to activate multiple general resource classes. The
following example activates the JES-related classes called JESINPUT,
JESJOBS, and JESSPOOL.
Example:
SETROPTS GENERIC(RACFEVNT)
RDEFINE RACFEVNT NOTIFY.LDAP.JES*
- Activate the RACFEVNT class and optionally RACLIST it to improve
performance.
SETROPTS CLASSACT(RACFEVNT) RACLIST(RACFEVNT)