z/OS Security Server RACF Macros and Interfaces
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Record type 81: RACF initialization record

z/OS Security Server RACF Macros and Interfaces
SA23-2288-00

RACF® writes record type 81 at the completion of the initialization of RACF. This record contains:
  • Record type
  • Time stamp (time and date)
  • Processor identification
  • Name of each RACF database
  • Volume identification of each RACF database
  • Unit name of the RACF database
  • Data set name of the UADS data set
  • Volume identification of the UADS data set
  • RACF options
  • The maximum password interval
  • The default installation language codes in effect at IPL time.
The format of record type 81 is:
Offsets
Dec. Hex. Name Length Format Description
0 0 SMF81LEN 2 Binary Record length.
2 2 SMF81SEG 2 Binary Segment descriptor.
4 4 SMF81FLG 1 Binary System indicator
Bit
Meaning when set
0-2
Reserved for IBM's use
3
MVS/
4
MVS/
5
MVS/
6
VS2
7
Reserved for IBM's use
Note: For MVS/, bits 3, 4, 5, and 6 are on.
5 5 SMF81RTY 1 Binary Record type: 81 (X'51').
6 6 SMF81TME 4 Binary Time of day, in hundredths of a second, that the record was moved to the SMF buffer.
10 A SMF81DTE 4 packed Date that the record was moved to the SMF buffer, in the form 0cyydddF (where F is the sign).
14 E SMF81SID 4 EBCDIC System identification (from the SID parameter).
18 12 SMF81RDS 44 EBCDIC Data set name of the RACF database for this IPL (blanks if RACF is not active).
62 3E SMF81RVL 6 EBCDIC Volume identification of RACF database. If the database is split among several DASD volumes, this field equals the first primary data set. If RACF is not active, this field is blank.
68 44 SMF81RUN 3 EBCDIC Unit name of RACF database; blanks if RACF is not active.
Note: If the master RACF primary database is on a device whose address is greater than X'FFF', the field contains ‘UCB’ instead of the EBCDIC device name.
71 47 SMF81UDS 44 EBCDIC Data set name of the user attribute data set (UADS) data set for this IPL.
115 73 SMF81UVL 6 EBCDIC Volume identification of the user attribute data set (UADS) data set.
121 79 SMF81OPT 1 Binary Options indicator
Bit
Meaning when set
0
No RACROUTE REQUEST=VERIFY statistics are recorded
1
No DATASET statistics are recorded
2
RACROUTE REQUEST=VERIFY preprocessing exit routine, ICHRIX01, is active
3
RACROUTE REQUEST=AUTH preprocessing exit routine, ICHRCX01, is active
4
RACROUTE REQUEST=DEFINE preprocessing exit routine, ICHRDX01, is active
5
RACROUTE REQUEST=VERIFY postprocessing exit routine, ICHRIX02, is active
6
RACROUTE REQUEST=AUTH postprocessing exit routine, ICHRCX02, is active
7
New-password exit routine, ICHPWX01, is active
122 7A SMF81OP2 1 Binary Options indicator 2
Bit
Meaning when set
0
No tape volume statistics are recorded
1
No DASD volume statistics are recorded
2
No terminal statistics are recorded
3
Command exit routine ICHCNX00 is active
4
Command exit routine ICHCCX00 is active
5
ADSP is not active
6
Encryption exit routine, ICHDEX01 is active
7
Naming convention table, ICHNCV00 is present.
123 7B SMF81OP3 1 Binary Options indicator 3
Bit
Meaning when set
0
Tape volume protection is in effect.
1
No duplicate data set names are to be defined
2
DASD volume protection is in effect
3
Record contains version indicator
4
RACROUTE REQUEST=FASTAUTH preprocessing exit routine, ICHRFX01, is active
5
RACROUTE REQUEST=LIST pre- and postprocessing exit routine, ICHRLX01, is active
6
RACROUTE REQUEST=LIST selection exit routine, ICHRLX02, is active
7
RACROUTE REQUEST=DEFINE postprocessing exit routine, ICHRDX02, is active.
124 7C SMF81AOP 1 Binary Audit options
Bit
Meaning when set
0
User class profile changes are being logged
1
Group class profile changes are being logged
2
Data set class profile changes are being logged
3
Tape volume class profile changes are being logged
4
DASD volume class profile changes are being logged
5
Terminal class profile changes are being logged
6
RACF command violations are being logged
7
SPECIAL user activity is being logged.
125 7D SMF81AO2 1 Binary Audit options 2
Bit
Meaning when set
0
Operation user activity
1
Audit by security level is in effect
2-7
Reserved for IBM's use
126 7E SMF81TMO 1 Binary Terminal verification options indicator
Bit
Meaning when set
0
Terminal authorization checking is in effect
1
Universal access for undefined terminals is NONE; if not set, UACC=READ
2
REALDSN is in effect
3
JES-XBMALLRACF is in effect
4
JES-EARLYVERIFY is in effect
5
JES-BATCHALLRACF is in effect
6
RACROUTE REQUEST=FASTAUTH postprocessing exit routine, ICHRFX02, is active
7
Reserved for IBM's use
127 7F SMF81PIV 1 Binary Maximum password interval (0-254).
128 80 SMF81REL 2 Binary Offset to the first relocate section from the beginning of the record header.
130 82 SMF81CNT 2 Binary Number of relocate sections.
132 84 SMF81VER 1 Binary Version indicator (6 = RACF Version 1, Release 7). As of RACF 1.8.1, SMF81VRM is used instead.
133 85 SMF81QL 8 EBCDIC Single-level data set name.
141 8D SMF81OP4 1 Binary Options indicator 4
Bit
Meaning when set
0
TAPEDSN is in effect
1
PROTECT-ALL is in effect
2
PROTECT-ALL warning is in effect
3
ERASE-ON-SCRATCH is in effect
4
ERASE-ON-SCRATCH by SECLEVEL is in effect
5
ERASE-ON-SCRATCH for all data sets is in effect
6
Enhanced generic naming is in effect
7
Record contains a version, release, and modification number (see SMF81VRM).
142 8E SMF81OP5 1 Binary Options indicator 5
Bit
Meaning when set
0
Access control by program is in effect
1
ACEE compression/expansion exit IRRACX01 is active
2
RACROUTE REQUEST=FASTAUTH postprocessing exit ICHRFX04 is active
3
RACROUTE REQUEST=FASTAUTH preprocessing exit ICHRFX03 is active
4
SETROPTS NOADDCREATOR is active
5
IRREVX01 exit is active
Note: The IRREVX01 exit point is defined to dynamic exit services. Bit 5 of SMF81OP5 indicates that an exit routine was active for this exit point at the time of the last IPL when the SMF record was written. The status can change either way multiple times throughout the life of the IPL. See the SET PROG operator command in z/OS MVS System Commands and the CSVDYNEX macro in z/OS MVS Programming: Authorized Assembler Services Reference ALE-DYN for more information.
6
ACEE compression/expansion exit IRRACX02 is active
7
Password exit routine, ICHDEX11 is active
143 8F SMF81RPD 2 Binary System retention period in effect.
145 91 SMF81SLV 1 Binary Security level for ERASE-ON-SCRATCH in effect.
146 92 SMF81SLC 1 Binary Security level for auditing in effect.
147 93 SMF81VRM 4 EBCDIC FMID for RACF
2020
RACF 2.2 and OS/390 Security Server (RACF) V1 R2
2030
OS/390 Security Server (RACF) V1 R3
2040
OS/390 Security Server (RACF) V2 R4
2060
OS/390 Security Server (RACF) V2 R6
2608
OS/390 Security Server (RACF) V2 R8
7703
OS/390 Security Server (RACF) V2 R10 and z/OS Security Server (RACF) V1 R1
7705
z/OS Security Server (RACF) V1 R2
7706
z/OS Security Server (RACF) V1 R3
7707
z/OS Security Server (RACF) V1 R4
7708
z/OS Security Server (RACF) V1 R5
7709
z/OS Security Server (RACF) V1 R6
7720
z/OS Security Server (RACF) V1 R7
7730
z/OS Security Server (RACF) V1 R8
7740
z/OS Security Server (RACF) V1 R9
7750
z/OS Security Server (RACF) V1 R10
7760
z/OS Security Server (RACF) V1 R11
7770
z/OS Security Server (RACF) V1 R12
7780
z/OS Security Server (RACF) V1 R13
7790
z/OS Security Server (RACF) V2 R1
151 97 SMF81BOP 1 Binary SETROPTS options.
Bit
Meaning when set
0
SECLABELCONTROL is in effect
1
CATDSNS is in effect
2
MLQUIET is in effect
3
MLSTABLE is in effect
4
MLS is in effect
5
MLACTIVE is in effect
6
GENERICOWNER is in effect
7
SECLABELAUDIT is in effect.
152 98 SMF81SIN 2 Binary Partner LU-verification session key interval.
154 9A SMF81JSY 8 EBCDIC JES NJE NAME user ID.
162 A2 SMF81JUN 8 EBCDIC JES UNDEFINEDUSER user ID.
170 AA SMF81BOX 1 Binary SETROPTS option extensions.
Bit
Meaning when set
0
COMPATMODE is in effect
1
CATDSNS failures are in effect
2
MLS failures are in effect
3
MLACTIVE failures are in effect
4
APPLAUDIT in effect
5
Zero (0) equals default RVARY SWITCH password in effect. One (1) equals installation-defined RVARY SWITCH password in effect.
6
Zero (0) equals default RVARY STATUS password in effect. One (1) equals installation-defined RVARY STATUS password in effect.
7
Reserved for IBM's use
171 AB SMF81PRI 3 EBCDIC Default primary language for an installation.
172 AC SMF81SEC 3 EBCDIC Default secondary language for an installation.
177 B1 SMF81KBL 1 Binary Level of KERB segment processing in effect.
178 B2 SMF81PMN 1 Signed Minimum days between password changes
179 B3 SMF81OP6 1 Binary Options indicator 6
Bit
Meaning when set
0
Mixed case passwords
1
New password phrase installation exit is active
2
Field validation exit point (IRRVAF01) for custom fields is active
Note: The IRRVAF01 exit point is defined to dynamic exit services. Bit 2 of SMF810P6 indicates that an exit routine was active for this exit point at the time of the last IPL when the SMF record was written. The status can change either way multiple times throughout the life of the IPL. See z/OS Security Server RACF System Programmer's Guide for more information.
3–7
Reserved for IBM's use
180 B4 SMF81ML2 1 Binary More SETROPTS options
Bit
Meaning when set
0
MLFSOBJ is active
1
MLIPCOBJ is active
2
MLNAMES is active
3
SECLBYSYSTEM is active
4–7
Reserved for IBM's use
181 B5   74   Reserved for IBM's use
Relocate section:
0 0 SMF81DTP 1 Binary Data type.
1 1 SMF81DLN 1 Binary Length of data that follows.
2 2 SMF81DTA 1-255 mixed Data.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014