CA OPS/MVS External Security question: Can RACF SMF records be produced and ICH408I messages for violations displayed in the SYSLOG?

Document ID:  TEC1062923
Last Modified Date:  06/07/2017
{{active ? 'Hide' : 'Show'}} Technical Document Details

Products

  • CA OPS/MVS Event Management and Automation

Releases

  • CA OPS/MVS Event Management and Automation:Release:12.3
  • CA OPS/MVS Event Management and Automation:Release:12.2

Components

  • CA OPS/MVS:OPSMVS
Introduction:

We just turned on 'External Security' for OPS, so that our RACF person can test it. We set the following parm values:
Name               Value
EXTSECURITY   ON
EXTSECPREFIX 'OP$MVS'
EXTSECCLASS  '$CAOPS'

It seems to be working OK, but he had some additional questions.

Question:
  1. Can RACF SMF records be produced and ICH408I messages for violations displayed in the SYSLOG?
  2. What is the best way to trace the activity so I can see the resource names as we try out the different options? We have never setup external security for ops before and the "SAF Resource Names Table" in the manual does not correlate the profiles to the various options off the panels.
Environment:
CA OPS/MVS? Event Management and Automation for JES2 - MVS Release:12.2 IBM RACF
Answer:

Try these recommendations:

  • One method to determine the OPS/MVS functionality (mapped closely to the resource names) aligned to the OPSVIEW and automation activity is to turn on SEC events in the OPSLOG (parameter BROWSESEC). Then, perform or test a given functionality and observe the OPSLOG for the SEC events generated from performing the functionality.
  • You can also turn on the DEBUGEXTSEC parameter to help testing. OPS9999T messages will be logged with what is being evaluated.
Additional Information:

Please help us improve!

Will this information enable you to resolve your issue?

Please tell us what we can do better.

{{feedbackText.length ? feedbackText.length : '0'}}/255

{{status}}

Not what you were looking for?

Search Again >

Product Information

Support by Product >

Communities

Join a Community >

Chat with CA

Just give us some brief information and we'll connect you to the right CA ExpertCA sales representative.

Our hours of availability are 8AM - 5PM CST.

All Fields Required

connecting

We're matching your request.

Unfortunately, we can't connect you to an agent. If you are not automatically redirected please click here.

  • {{message.agentProfile.name}} will be helping you today.

    View Profile


  • Transfered to {{message.agentProfile.name}}

    {{message.agentProfile.name}} joined the conversation

    {{message.agentProfile.name}} left the conversation

  • Your chat with {{$storage.chatSession.messages[$index - 1].agentProfile.name}} has ended.
    Thank you for your interest in CA.


    Rate Your Chat Experience.

    {{chat.statusMsg}}

agent is typing