DBU$0000 - Print RACF profiles

Purpose:
A batch tool to create over 80 standard reports (ready to use) for a given IRRDBU00 record type. This feature has been implemented as some installations do not have ICETOOL from IBM available to take advantage e.g. of IRRICE. One report per record type can be created. In some cases not all data will fit on one line i.e. certain fields have been reduced e.g. a general resource name has been cut to 44 characters.

The following record types are supported to create basic table styled reports:

    • 0100 - Group data
    • 0101 - Group Subgroups
    • 0102 - Group members
    • 0103 - Group Installation Data
    • 0110 - Group DFP Data
    • 0120 - Group OMVS Data
    • 0130 - Group OVM Data
    • 0140 - Not supported
    • 0141 - Group TME® Data
    • 0150 - Not supported
    • 0151 - Group CSDATA Custom fields
    • 0200 - User Basic Data
    • 0201 - User Categories
    • 0202 - User Classes
    • 0203 - User Group Connections
    • 0204 - User Installation Data
    • 0205 - User Connect Data
    • 0206 - User RRSF Data
    • 0207 - User Certificate Name
    • 0208 - User Associated Mappings
    • 0209 - User Associated Distributed Mappings
    • 0210 - User DFP Data
    • 0220 - User TSO Data
    • 0230 - User CICS® Data
    • 0231 - User CICS Operator Classes
    • 0232 - User CICS RSL Keys
    • 0233 - User CICS TSL Keys
    • 0240 - User Language Data
    • 0250 - User OPERPARM Data
    • 0251 - User OPERPARM Scope
    • 0260 - User WORKATTR Data
    • 0270 - User OMVS Data
    • 0280 - User NETVIEW Segment
    • 0281 - User OPCLASS
    • 0282 - User DOMAINS
    • 0290 - User DCE Data
    • 02A0 - User OVM Data
    • 02B0 - User LNOTES Data
    • 02C0 - User NDS Data
    • 02D0 - User KERB Data
    • 02E0 - User PROXY Data
    • 02F0 - User EIM Data
    • 02G0 - Not supported
    • 02G1 - User CSDATA Custom fields
    • 0400 - Data Set Basic Data
    • 0401 - Data Set Categories
    • 0402 - Data Set Conditional Access
    • 0403 - Data Set Volumes
    • 0404 - Data Set Access
    • 0405 - Data Set Installation Data
    • 0410 - Data Set DFP Data
    • 0420 - Not supported
    • 0421 - Data Set TME Data
    • 0500 - General Resource Basic Data
    • 0501 - General Resource Tape Volume Data
    • 0502 - General Resource Categories
    • 0503 - General Resource Members
    • 0504 - General Resource Volumes
    • 0505 - General Resource Access
    • 0506 - General Resource Installation Data
    • 0507 - General Resource Conditional Access
    • 0508 - General Resource Filter Data
    • 0509 - General Resource Distributed Identity Mapping Data
    • 0510 - General Resource Session Data
    • 0511 - General Resource Session Entities
    • 0520 - General Resource DLF Data
    • 0521 - General Resource DLF Job Names
    • 0530 - Not supported
    • 0540 - General Resource Started Task Data
    • 0550 - General Resource SystemView® Data
    • 0560 - General Resource Certificate Data
    • 0561 - General Resource Certificate References
    • 0562 - General Resource Key Ring Data
    • 0570 - General Resource TME Data
    • 0571 - General Resource TME Child
    • 0572 - General Resource TME Resource
    • 0573 - General Resource TME Group
    • 0574 - General Resource TME Role
    • 0580 - General Resource KERB Data
    • 0590 - General Resource PROXY Data
    • 05A0 - General Resource EIM Data
    • 05B0 - General Resource Alias Data
    • 05C0 - General Resource CDTINFO Data
    • 05D0 - General Resource ICTX Data
    • 05E0 - General Resource CFDEF Data
    • 05F0 - General Resource SIGVER Data
    • 05G0 - General Resource ICSF
    • 05G1 - General Resource ICSF Key Label
    • 05G2 - General Resource ICSF Certificate Identifier



    JCL required to run DBU$0000

    Run the following JCL (refer to the RA2002.SAMPLIB member DBU$0000) to create the report where XXXX (4 bytes) is the requested record type e.g. 0100, 0200 etc. followed by a comment :

    //LISTDBU0 EXEC PGM=DBU$0000,
    // PARM='
    XXXX,THIS IS JUST A TEST TO FILTER RECORDS'
    //STEPLIB DD DISP=SHR,DSN=RA2002.LINKLIB
    //IRRDBU00 DD DISP=SHR,DSN=MY.IRRDBU00.FLATFILE <== CHANGE
    //DBUPRINT DD SYSOUT=*




    optionally specify filter criteria:

    //FLTPRINT DD SYSOUT=*
    //FLTINPUT DD *
    +INCLUDE COND=(0010,8,CH,EQ,MYID100)
    //*
    /*


    optionally create RACF commands as of version 3.7.1:

    //DBUPUNCH DD SYSOUT=*,DCB=LRECL=80
    //COMMANDS DD DISP=SHR,DSN=MY.COMMANDS


    Members are called DBUCxxxx (xxxx = record type) and reside in the supplied COMMANDS file. Create your own COMMANDS PDS file as needed.

    The supplied commands file/PDS contains the IBM DB2 name and the assigned internal variable name you can utilize e.g. &R10NAME = group name. All fields with the content 'YES or NO' are set to 'Y or N' instead!

    *
    GPBD_NAME=&R10NAME
    * GPBD_SUPGRP_ID=&R10SUPG
    * GPBD_CREATE_DATE=&R10AUTHD
    * GPBD_OWNER_ID=&R10OWNER
    * GPBD_UACC=&R10UACC
    * GPBD_NOTERMUACC=&R10TUACC
    * GPBD_INSTALL_DATA=&R10DATA
    * GPBD_MODEL=&R10MODEL
    * GPBD_UNIVERSAL=&R10UNIV

    E.g. to delete a group specify
    "DG &R10NAME" in the member DBUC0100 of the //COMMANDS file.




    Note: it is the users responsibility to sort the //IRRDBU00 file prior to create listings if the default sort sequence is not acceptable.