z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Steps to re-enable a previously defined dynamic class

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

  1. If SETROPTS RACLIST was active for the dynamic class (before you issued the SETROPTS NORACLIST(CDT) command), rebuild the profiles in storage for the class.

    Example: SETROPTS RACLIST(HORSES8)

    ______________________________________________________________________

  2. If GLOBAL=YES RACLIST ONLY was active for the dynamic class (before you issued the SETROPTS NORACLIST(CDT) command), the application that issued the RACROUTE REQUEST=LIST,GLOBAL=YES macro must reissue the macro to rebuild the profiles in storage for the class.

    ______________________________________________________________________

  3. Issue the SETROPTS LIST command and carefully review the output, noting whether the dynamic class you want to restore appears in any of the following lists.
    • GLOBAL CHECKING CLASSES
    • GENERIC PROFILE CLASSES
    • GENLIST CLASSES
    1. If SETROPTS GLOBAL is active for your class, refresh the global access checking table for the class.

      Example: SETROPTS GLOBAL(HORSES8) REFRESH

      _________________________________________________________________

    2. If SETROPTS GENERIC or SETROPTS GENLIST is active for your class, refresh the generic profiles in storage for the class.

      Example: SETROPTS GENERIC(HORSES8) REFRESH

    ______________________________________________________________________

You have now re-enabled the use of a previously defined dynamic class that inadvertently remained when the dynamic CDT was disabled. The options that were previously active for the class should again be active.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014