z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Using options in RACROUTE REQUEST=VERIFY statistics collection

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

A user with the SPECIAL attribute can request RACF® to record statistics during RACROUTE REQUEST=VERIFY processing. The REQUEST=VERIFY is issued when a user logs on to the system, a batch job enters the system, or when RACF does such work as a directed command, application update, or password change on behalf of a user. RACF maintains the following statistics:
  • The date and time the REQUEST=VERIFY request is issued for a particular user
  • The number of REQUEST=VERIFY requests for a user to a particular group
  • The date and time of the last REQUEST=VERIFY request for a user to a particular group

You must maintain statistics if you intend to use the INACTIVE, REVOKE, HISTORY, and WARNING options of SETROPTS.

If you do not intend to use a SETROPTS options that requires statistics and you do not need all of the statistics, you can issue SETROPTS NOINITSTATS to reduce the RACF database I/O associated with REQUEST=VERIFY requests. You must have the SPECIAL attribute to issue the SETROPTS NOINITSTATS command.

If NOINITSTATS is in effect, the INACTIVE, REVOKE, HISTORY, and WARNING options cannot be used.

If you have the SPECIAL attribute, you can also specify the INITSTATS operand on the SETROPTS command to indicate that you want RACF to record REQUEST=VERIFY statistics, as shown in the following example:
SETROPTS INITSTATS

INITSTATS is in effect when RACF is first initialized.

Note: Being enabled for sysplex communication might reduce the overhead associated with INITSTATS.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014