Symantec IGA

 View Only

RACF OMVS Segment limitation

  • 1.  RACF OMVS Segment limitation

    Posted Oct 03, 2014 08:50 AM

    This discussion and question relates specifically to the RACF connector in IndentityMinder.

     

    We are experiencing provisioning failures when provisioning multiple RACF accounts for a single user. We found the common denominator is users with OMVS segments and multiple RACF ids.

    We need to add the "Shared" parameter to the OMVS segment UID component in the RACF template. This will allow us to create multiple IDs for users as needed and allow only one uid per user.

     

    Currently, the command the RACF connector creates looks like...

    altuser SSATS2 omvs(uid(90951868) home('/u/ssats2') program('/bin/sh'))

    We need it to include the literal "shared" following the uid so it would look like

    altuser SSATS2 omvs(uid(90951868) shared home('/u/ssats2') program('/bin/sh'))

     

     

    Feedback from the ticket I created stated this is not currently supported by the RACF connector.  Has anyone encountered this?  If so, any work arounds?  Any help would be greatly appreciated.

    Robert