SETROPTS data
SETROPTS data is returned by R_admin in a different format than
profile data. IRRXUTIL converts the SETROPTS extract data into the
same output format as the profile data with the following considerations:
- For profile data, repeating fields are described by a header field as documented in R_admin reference information in z/OS Security Server RACF Callable Services. For SETROPTS extract, there are no header fields that are documented for
repeating data. Therefore, IRRXUTIL simulates a repeat field header by appending “_CT”
to the name of the field as documented for R_admin. For example, the CLASSACT field returns a list
of active classes. IRRXUTIL returns a header field named CLASSACT_CT, followed by an instance of the
CLASSACT field for each active class. The following list shows the repeat field header names
returned for SETROPTS:
- CLASSACT_CT
- CLASSTAT_CT
- GENCMD_CT
- GENERIC_CT
- GENLIST_CT
- GLOBAL_CT
- RACLIST_CT
- AUDIT_CT
- LOGALWYS_CT
- LOGNEVER_CT
- LOGSUCC_CT
- LOGFAIL_CT
- LOGDEFLT_CT
- While there is a flag field for the segment entry returned by R_admin for SETROPTS extract, it does not have the same meaning or contents as the segment descriptor flag field for profile extract. IRRXUTIL always returns a value of "00000000" for stem.segname.FLAGS for SETROPTS data.