RACF Advanced Topics

Objectives
On successful completion of this course, attendees will be able to:

• describe the purpose and use of the started task table and its definition
• describe the purpose and use of the global access checking table and its definition
• explain what RACF variables are, how they are used and how the are defined and managed
• explain the purpose and use of field level access checking and how it can be defined and managed
• describe the purpose and use of the FACILITY resource class and explain the action of sample FACILITY class profiles
• describe the purpose and use of digital certificates and explain how they can be created, managed and used
• explain the purpose and use of the SEARCH command, in particular the use of the CLIST operand, and give examples of the use of SEARCH
• understand the purpose of the RACF database table (ICHRDSNT) and explain how it can be created and modified
• explain the purpose and use of the RVARY command and explain how the command is secured
• explain the purpose and use of the RACF Remote Sharing Facility and describe how it operates and how its use can be controlled
• identify how the operation of RACF changes when running in a parallel sysplex
• describe how to control RACF operation in a parallel sysplex.

Who Should Attend
This course will benefit RACF Administrators, RACF Auditors, systems programmers, and anyone requiring knowledge of advanced RACF administration principles and practices
Prerequisites
Attendance on the RSM course ''RACF Administration & Auditing''.
Duration
2 days
Course Code
MRAT
Contents
Advanced features
The Started Task table: using ICHRIN03; using the STARTED class; the Global Access Checking table; using the Global Access Checking table; RACF variables; using the RACFVARS class; using RACF variables; field level access checking; using the FIELD class; FIELD class examples; the FACILITY class; digital certificates; basic RACDCERT; full RACDCERT syntax; RACDCERT command authority; SEARCH command basics; SEARCH control parameters; the FILTER & MASK parameters; FILTER & MASK examples; the backup RACF database; the RACF database name table; the RVARY command.


RACF Remote Sharing Facility
The RACF Remote Sharing Facility; RACF command direction; RACF password synchronisation; managed user associations; controlling RACLINK use; controlling password synchronisation; controlling the AT keyword; automatic RACF command direction; controlling automatic RACF command direction; combined RACF command direction; use of ONLYAT keyword; automatic password synchronisation; controlling automatic password synchronisation; password synchronisation by command; combined RACF command direction; defining RRSF nodes; the RACF subsystem & parameter library.


RACF and Sysplex
Types of Sysplex; basic Sysplex; Parallel Sysplex; RACF and Sysplex; RACF communication; RACF data sharing; RACF data sharing problems; the four Sysplex modes; the RACF database name table; Coupling Facility structures; defining Coupling Facility structures; in-storage profiles; RACLISTed profiles via RACROUTE; in-storage profiles and Sysplex; introducing RACGLIST; RACGLIST and REFRESH; using RACGLIST.