OA67286: NEW FUNCTION - RACF User Containment

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• NEW FUNCTION - RACF User Quarantine
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: RACF Users who want to quarantine users,     *
  *                 disallowing access from active sessions.     *
  ****************************************************************
  User revocation only keeps new sessions from being started.
  Any active sessions for a user who is revoked will still be
  able to run with their current security context.  There is no
  way to contain a user so that it has no access.
  

Problem conclusion

Temporary fix

Comments

• RACF adds the ability to contain a user so that in addition
  to revocation, any future access attempts by active sessions
  for that user will fail.
  
  No ISPF panels are updated for this support
  
  The following z/OS 3.2 publications are updated to describe the
  new function. This information is also applicable for z/OS 3.1.
  
  SA232293xx Security Server RACF Callable Services
  SA232292xx Security Server RACF Command Language Reference
  GA320885xx Security Server RACF Data Areas
  SA232294xx Security Server RACOUTE Macros Reference
  SA232290xx Security Server RACF Auditor's Guide
  SA232289xx z/OS Security Server RACF Security Administrator's
                                 Guide
  SA232291xx z/OS Security Server RACF Messages and Codes
  SA231371xx z/OS MVS Programming: Authorized Assembler Services
                                 Guide
  
  For the specific topics that are updated, see the
  'summary of changes' section for each of these publications.
  Fixcat: RACFUSERQ/K
  ×**** PE25/12/16 FIX IN ERROR. SEE APAR OA68897  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ97734 UJ97748

Modules/Macros

• ICHCAU00 ICHCCU00 ICHCCU01 ICHCLU00 ICHCOP02 ICHCOP11 ICHCRV00
  ICHCRV01 ICHDSM00 ICHDSM05 ICHDSM35 ICHIRCVT ICHIRCVX ICHRAU00
  ICHRAU02 ICHRAU03 ICHRFC00 ICHRFC05 ICHRIN00 ICHRIN05 ICHRST00
  ICHSEC00 ICHSEC07 ICHSGF00 ICHTRM00 IRRADU01 IRRADU10 IRRADU20
  IRRADU50 IRRADULD IRRADUTB IRRADUX1 IRRCAU0P IRRCCU0P IRRCDC00
  IRRCMP00 IRRCPL00 IRRCPR00 IRRDAU00 IRRDAU03 IRRDAU04 IRRDBU03
  IRRE7100 IRRENF00 IRRENV00 IRRENVM1 IRRFLC00 IRRFND00 IRRIDENF
  IRRLST00 IRRLSTAU IRRLSTPC IRRPVERS IRRRCK00 IRRREQTB IRRRFC20
  IRRRFC21 IRRRIN11 IRRRKA00 IRRRMK00 IRRRSM01 IRRRSM03 IRRRXT00
  IRRSCHEM IRRSSC00 IRRSSC09 IRRSSM04 IRRTUC00 IRRTUCM1 IRRXTR01
  IRRZDC01 IRRZDC10 RACDBULD RACDBUTB
  

Fix information

• Fixed component name

  RACF

• Fixed component ID

  5752XXH00

Applicable component levels

• R7E0 PSY UJ97734

     UP25/08/15 P F508  

• R7F0 PSY UJ97748

     UP25/08/15 P F508  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.