VM66892: Z/VM 7.4 RACF FEATURE PACK - FEATURE 03 FIX 00

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• This is the APAR for z/VM 7.4 RACF Feature Pack 3.  As such,
  it contains RACF product code for two new features.
  
  1. Enhancement to the RACF RPIDIRCT utility to eliminate the
    manual changes needed to RPIDIRCT SYSUT1 file after
    RPIDIRCT is run.
  2. Simplify the configuration of the DirMaint-RACF Connector
    as part of the RACF enablement process.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Customers who are preparing to deploy RACF   *
  *                 for first time or who wish to establish      *
  *                 a new resource protection schema in their    *
  *                 existing RACF database.                      *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION: APPLY PTF                                    *
  ****************************************************************
  This is the APAR for z/VM 7.4 RACF Feature Pack 3.
  As such it contains the following new function:
  
  Enhancement to the RACF RPIDIRCT utility
  ------------------------------------------------------------
  
  Creating and enabling policy on a RACF for z/VM system running
  the RPIDIRCT utility can be complex and can require significant
  z/VM expertise to manually modify the RPIDIRCT SYSUT1 file.
  The RACF database preparation program, RPIDIRCT EXEC, is
  enhanced to reduce the complexity of the RACF enablement
  process, resulting in a simpler, easier to manage, RACF
  configuration.
  
  
  Simplify the configuration of the DirMaint-RACF Connector
  -------------------------------------------------------------
  
  The configuration of the DirMaint-RACF Connector requires the
  generation of a CONFIGRC DATADVH file from a sample CONFIGRC
  sample file provided by z/VM DirMaint.  This RACF enhancement
  provides simplification for the configuration of DirMaint-RACF
  Connector as part of the RACF installation and configuration
  process.
  

Problem conclusion

Temporary fix

Comments

• RPIDIRCT has been enhanced to reduce the amount of time
  and effort needed to establish a RACF configuration that
  meet your operational and security needs.
  
  The RPIDIRCT CNTRL file has been updated to enable you to
  provide RACF configuration policy details such as default
  group definitions, password policies, and protected events.
  It is no longer necessary to comb through the publications
  looking for the needed commands in order to manually add them
  to the configuration.
  
  The new RPIDIRCT will assign attributes such as OPERATIONS
  and AUDITOR to certain virtual machines as described in
  product documentation, being required for proper operation.
  This reduces manual intervention, improves consistency, and
  This avoids commonly-encountered configuration errors.
  
  Finally, RPIDIRCT has been updated to create a DIRMAINT
  configuration file, CONFIGRC DATADVH,  that you can use to
  ensure that the RACF policies used when the RACF database is
  first initialized are maintained during steady-state system
  operation when using the z/VM Directory Maintenance Facility.
  
  Together, these enhancements provide a more streamlined and
  effective RACF enablement procedure.
  
  To read more about these RACF enhancements, refer to the
  z/VM 7.4.0 RACF Security Server Security Administrator's
  Guide (SC24-6311-74) available at the z/VM web site
  https://www.ibm.com/docs/en/zvm/7.4
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UV99462

Modules/Macros

• RPIBL651 RPIDIRCT RPIDIRM  7VMRAC40
  

Fix information

• Fixed component name

  RACF/VM SUPPORT

• Fixed component ID

  576700201

Applicable component levels

• R740 PSY UV99462

     UP26/05/05 I 1000

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.