How can we obtain the dynamic user's name from RACF?

Document ID : KB000054186
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

We are creating a new TPX for dynamic users. We are trying to capture the user's name from RACF's IHAACEE macro and write it into the TPX admin file using the following SMRT Security Parameters:

* Security System:           RACF       * Profile Selection:         USER    
* Alias Name:                           * Resource Class:               
* User Name Info Offset:     0064       * User Name Info Length:     25         
                                        * Write User Info to File:   Y

Field help indicates:

User Name Info Offset - Specifies where the user's name can be found in the security record. This field is used only if 'Write User Info to File' is set to Y.

According to IBM's z/OS Security Server RACF Data Areas (GA22-7680-09) manual, the offset for ACEEUNAM is hex 64.

However, when specifying offset 64, the user names are not populated from RACF. They are blank.

Here is a display from TPXOPER D U:

TPX10    - TST2 ************* TPX Operator      **********************  TEN0207
                                                                             
                                 User Summary                                
                   ---- Status -----     Total     Max User                  
                   Active   Inactive     Users      Limit                    
                   00001     00000       00001      00000       
             
   Userid      Terminal      Status      Act             User Name           
  TEC0218      MDBC0163     ACT/SESS     000                                 
******************************** BOTTOM OF DATA *****************************

Solution:

Set User Name Offset to 0 (zero).

User Name Info Offset - This needs to be set to the offset to the POINTER to the name field, not the name field itself.

Help panel changes will be implemented with next service pack and/or release.

User Name is now visible in TPXOPER D U:

TPX10    - TST2 ************* TPX Operator      **********************  TEN0207
                                                                             
                                 User Summary                                
                   ---- Status -----     Total     Max User                  
                   Active   Inactive     Users      Limit                    
                   00001     00000       00001      00000       
             
   Userid      Terminal      Status      Act             User Name           
  TEC0218      MDBC0163     ACT/SESS     000     SMITH JOHN                            
******************************** BOTTOM OF DATA *****************************