I am inserting an ACF2 GSO SAFDEF, what should be specified for the ID parameter of the SAFDEF?

Document ID : KB000026283
Last Modified Date : 14/02/2018
Show Technical Document Details

Question:  

I am inserting an ACF2 GSO SAFDEF, what should be specified for the ID parameter of the SAFDEF?

Answer: 

The ACF2 GSO SAFDEF ID specifies an ID name associated with the record. You can specify up to eight characters.

The GSO SAFDEF ID parameter is described as follows(from the CA ACF2 Administrator Guide):

ID(name)

Select an ID name that is unique and that conveys meaning about the type of SAF call you are defining.

For example, MYIDAUTH would be an appropriate ID for a SAFDEF record that defines the environment for a REQUEST=AUTH call from MYAPPL.

For example:

insert safdef.MYIDAUTH id(MYIDAUTH) RACROUTE(REQUEST=AUTH,CLASS=MYAPPL) 

X999 / SAFDEF.MYIDAUTH LAST CHANGED BY USER002 ON 30/10/08-11:00 FUNCRET(4) FUNCRSN(0) ID(MYIDAUTH) MODE(GLOBAL) RACROUTE(REQUEST=AUTH CLASS=MYAPPL) RETCODE(4)

Sample SHOW SAFDEF command using ID mask:

show safdef(m-)                                             
  -- SYSTEM AUTHORIZATION FACILITY DEFINITIONS --           
MYIDAUTH JOBNAME=******** USERID=******** PROGRAM=******** RB=******** RETCODE=4 SAFDEF=GSO MODE=GLOBAL SUBSYS=**** FUNCRET=4 FUNCRSN=0
RACROUTE REQUEST=AUTH,CLASS='MYAPPL'


MCSAUTH JOBNAME=******** USERID=******** PROGRAM=******** RB=******** RETCODE=4 SAFDEF=GSO MODE=GLOBAL SUBSYS=**** FUNCRET=4 FUNCRSN=0 RACROUTE REQUEST=AUTH,CLASS='MCSCON'

Note: The SHOW SAFDEF command syntax is:

  SHOW SAFDEF('ID-MASK'/REQ='TYPE') 
      - SHOW SAF ENVIRONMENT DEFINITION RECORDS. 
      'ID-MASK' DEFAULTS TO '-'.  REQ='TYPE' DISPLAYS 
      ENTRIES FOR A SPECIFIC SAF REQUEST TYPE. 

Additional Information:

Details on the ACF2 GSO SAFDEF can be found in the CA ACF2 for z/OS Administration Guide in Chapter 14: Maintaining Global System Options Records section 'Environments for SAF Calls (SAFDEF)'.