Storing RACF command from Connector - the RACF routine

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

With the RACF-connector you have the option to execute a PRE script, a POST script and to let the actual connector do the RACF routine (execute the RACF command with the actions from IIQ. Like ALTUSER, ADDUSER etc…)

With the scripts you have all different variables, but i don’t see a variable that actually holds the full RACF command that would be executed then the RACF routine is invoked.

Is it possible to trap the command the RACF routine would do in a dataset, in stead of executing it directly?

Thanks in advance!

2

@tOsaer Have you tried enabling logs at RACF end to see if it can print the command?

3

It also not needs to execute the command, only put the command in an output dataset.

4

@timcarroll I didn’t get your requirement. Could you please share more details?

AFAIK the RACF Connector does not expose the raw generated command string as a variable within the Rule context. You can try having some customization in RACF routine that may allow writing to a output dataset.

5

Raw output is not available on the IIQ side, so it would solely be on the Connector Gateway or on the mainframe agent.

6

Yes, that is exactly what i would need.

The raw generated command RACF command as a string.

So if i understood correctly, this is not possible to get this?

7

I don’t think so Tim. IIQ will not have the exact command details, you need to handle at RACF end.

8

How do you mean, “handle at RACF end”? As it is the connector itself that does the RACF Routine and executes the provisioning RACF commands?

9

@tOsaer I am not fully familiar with RACF connectors, but what I meant is there should be some control executor or processor available at RACF end where you can try to print the command.