[prev in list] [next in list] [prev in thread] [next in thread] 

List:       racf-l
Subject:    Re: DB2 / RACF class deactivation
From:       Hayim Sokolsky <hsokolsky () ROCKETSOFTWARE ! COM>
Date:       2023-06-27 12:28:48
Message-ID: DM5PR0701MB368800E2C3C92013720EC031C327A () DM5PR0701MB3688 ! namprd07 ! prod ! outlook ! com
[Download RAW message or body]


For activation, the RACF classes must be active and have at least 1 profile so the \
RACLIST performed by the exit works. For deactivation, you can do any of the \
following:

  *   SETROPTS NOCLASSACT(...) for each of the classes.
  *   Delete all profiles that you wish to deactivate and then issue SETROPTS \
RACLIST(...) REFRESH for the affected classes.

DB2 may continue to use cached results for prior successful access for a short period \
of time.


[Icon  Description automatically generated]
Hayim Sokolsky (he/him/his)
Director, Software Engineering
Rocket Software, USA

E: hsokolsky@RocketSoftware.com<mailto:hsokolsky@RocketSoftware.com>
W:RocketSoftware.com<https://www.rocketsoftware.com/>
[cid:image002.png@01D9A8D1.64DF0930]<https://www.facebook.com/RocketSoftwareInc>[cid:i \
mage003.png@01D9A8D1.64DF0930]<https://www.linkedin.com/company/rocket-software/>[cid: \
image004.png@01D9A8D1.64DF0930]<https://twitter.com/rocket>[cid:image005.png@01D9A8D1.64DF0930]<https://www.youtube.com/c/Rocketsoftware-rs>
 The views I have expressed in this email are my own personal views, and are not \
endorsed or supported by, and do not necessarily express or reflect, the views, \
positions or strategies of my employer.

From: RACF Discussion List <RACF-L@LISTSERV.UGA.EDU> On Behalf Of Lennie \
                Dymoke-Bradshaw
Sent: Tuesday, June 27, 2023 07:35
To: RACF-L@LISTSERV.UGA.EDU
Subject: DB2 / RACF class deactivation

EXTERNAL EMAIL



Greetings all,



This is a question about the DB2 / RACF interface module DSNXRXAC.

While doing planning for testing for a conversion to use RACF security for
DB2 object we have seen that the RACF classes must be active when the exit
is invoked at DB2 initialisation. If not then the checks revert to using
old-style DB2 checking.



However, for fallback purposes can we rely on inactivating those RACF
classes to revert to DB2 checking?

Or do we need to re-initialise DB2?



Thanks,



Lennie Dymoke-Bradshaw

<https://rsclweb.com/<https://rsclweb.com>> https://rsclweb.com<https://rsclweb.com>


'Dance like no one is watching. Encrypt like everyone is.'






================================
Rocket Software, Inc. and subsidiaries ? 77 Fourth Avenue, Waltham MA 02451 ? Main \
Office Toll Free Number: +1 855.577.4323 Contact Customer Support: \
https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport Unsubscribe from \
Marketing Messages/Manage Your Subscription Preferences - \
http://www.rocketsoftware.com/manage-your-email-preferences Privacy Policy - \
http://www.rocketsoftware.com/company/legal/privacy-policy \
================================

This communication and any attachments may contain confidential information of Rocket \
Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you \
are not the intended recipient, please notify Rocket Software immediately and destroy \
all copies of this communication. Thank you.


["image001.png" (image/png)]
["image002.png" (image/png)]
["image003.png" (image/png)]
["image004.png" (image/png)]
["image005.png" (image/png)]

[prev in list] [next in list] [prev in thread] [next in thread]