Belkin F5D5230-F Manual de Instalação descarregar pdf (Página 103)

103

The biggest challenge was to translate ACF2 rules into RACF dataset

and resource profiles. Again, we produced a flat file of all the ACF2

rules defining access to datasets and resources. This process is fairly

simple in ACF2 using the ACF2 DECOMPILE command. The result

goes to a Partitioned Data Set (PDS), but ISPF/TSO can be used to

copy this PDS to a sequential or ‘flat’ file. The translation process

itself is fairly involved, since the way ACF2 processes and interprets

security access rules is quite different from the way it is done in RACF.

The following example illustrates the translation process from ACF2

rules to RACF commands.

Suppose that all programmers in DEPT1 are allowed full access to the

DEPT1 test datasets. Further, assume that such datasets all begin with

DEPT1.TEST. The ACF2 rule for this would look, in part, like this:

$KEY(DEPT1)

TEST.- UID(DEPT1GRP) READ(ALLOW) WRITE(ALLOW) ALLOCATE(ALLOW) EXEC(A)

We edited and ‘massaged’ the above data using ISPF/TSO edit to

come up with its RACF equivalent:

PERMIT 'DEPT1.TEST.**' ID(DEPT1GRP) ACCESS(ALTER)

There were thousands of such translations to be done, so ‘massaging’

all of them at once, using edit commands, really helped. Again, SAS

may be better suited for larger installations.

This approach also meant that we had to use RACF CLISTs (Command

Lists) and commands to build our initial RACF database, and not the

RACF ISPF panels. Of course, once the database is built and you go

live with RACF, it’s a matter of preference whether to use commands

or RACF panels.

We were keeping track of all the security changes that occurred since

the date we started the translation process. These changes were carried

forward to RACF just before going ‘live’.

RACF GLOBAL OPTIONS

Another important conversion activity is specifying RACF ‘global

options’. These are high-level parameters that determine how RACF

will function at the installation in overall or ‘global’ terms. They are

1 2 ... 98 99 100 101 102 103 104 105 106 107 108 ... 114 115

Sem comentários

Belkin F5D5230-F Manual de Instalação Página 103