Security

Converting To & From RACF Universal Groups

5 Pages

When the CNV2UGRP load module is created, the utility is ready to use. To convert a RACF standard group to a RACF UNIVERSAL group, run the JCL in Figure 2.

Use the GROUPNAME parameter to specify the name of the group you want to convert to a UNIVERSAL group. If the specified group exists and isn’t already a UNIVERSAL group, there’s nothing that will prevent a successful conversion unless the system crashes while the batch utility is running. When the utility completes the conversion, a message will be issued to the SYSPRINT output DD as follows: UNVG000I - Specified group STDGRP has been converted to a RACF UNIVERSAL group.

Other messages that could be issued from CNV2UGRP, depending on the status of the system and the group itself, include those shown in Figure 3. In these messages, ‘xxxxxxxx’ will be the name of the group specified in the GROUPNAME PARMLIB parameter. Other messages can be issued related to the PARMLIB data entry. You can review the utility’s source code for the specific parameter errors that are reported on.

Using the CNV2SGRP Utility

When the CNV2SGRP load module is created, the utility is ready to use. To convert a RACF UNIVERSAL group to a RACF standard group, run the JCL in Figure 4.

Use the GROUPNAME parameter to specify the name of the group you want to convert to a standard group. If the specified group exists, it isn’t already a standard group, and the connected userid count doesn’t exceed 5,957, there’s nothing that will prevent a successful conversion unless the system crashes while the batch utility is running. When the utility completes the conversion, a message will be issued to the SYSPRINT output DD as follows:

UNVG000I - Specified group UNIVGRP has been converted to a RACF standard group.

Other messages that could be issued from CNV2SGRP, depending on the status of the system and the group itself, are shown in Figure 5. In these messages, ‘xxxxxxxx’ is the name of the group specified in the GROUPNAME PARMLIB parameter. Other messages can be issued related to the PARMLIB data entry. You can review the utility’s source code for the specific parameter errors that are reported on.

Be Careful

Consider two words of caution when using these two conversion utilities:

• There is no locking of the RACF database during these conversions, so the utilities should be run when there’ll be no other updates occurring against the group in question.

• These utilities are coded with no ESTAE, so there’ll be no recovery in the event of a program abend. Don’t fret too much about that; the programs have been thoroughly tested against all possible scenarios. The most likely issue (and this is remote) is a total system crash while a conversion is running.

Try things out on some test groups until you’re comfortable with what the utilities can do.

Conclusion

Being able to convert to and from a RACF UNIVERSAL group on the fly is a powerful capability. If you’re pushing the limits on the number of connected userids to a standard group, the CNV2UGRP utility may just be the answer to that limitation. In addition, if you have a RACF UNIVERSAL group that no longer requires that attribute, you can use the CNV2SGRP utility to easily convert things over to a standard group. In either case, these are handy utilities to include in your systems support toolbox.   

5 Pages