ACFCVACT - Converting Accounts

Conversion Utilities › ACFCVACT - Converting Accounts

ACFCVACT - Converting Accounts

The ACFCVACT REXX exec creates account resource rules from the CP directory. This exec also prepares a file of ACF CHANGE subcommands to create the VMACCT field values for logonids in the directory. These values are the default account numbers for virtual machines defined for account validation.

It translates binary zeros in the UID to asterisks when it generates the rules.

Prerequisites

You must install and IPL CA ACF2 for z/VM before you can execute ACFCVACT. Also, the ACF module and the USER DIRECT file must be accessible; otherwise, the exec does not run.

Running ACFCVACT

This exec creates two files, ACCOUNT COMMANDS and ACCOUNT RULE. CA ACF2 for z/VM uses these files to install account records and rules in your Infostorage database. To create account resource rules, you must perform two basic steps:

Enter the following command to execute ACFCVACT:
```
ACFCVACT
```
The exec informs you if the ACCOUNT COMMANDS and ACCOUNT RULE files already exist. If these files exist, proceed to Step 2.
- CA ACF2 for z/VM prompts you to enter the filename, filetype, and filemode of the user directory file.
- CA ACF2 for z/VM prompts you to enter the type code for your system's account resource rules, defined in the ACCOUNT operand in the RESCLASS VMO record. Use the following subcommand of ACF to display the value of ACCOUNT:
```
	SHOW STATE
```
  The directory is processed. Messages indicate which users have no logonids. ACFCVACT does not create account resource rules for these users. The messages also indicate the total number of accounts processed.
  
  ACFCVACT generates the following messages when processing is complete:
```
	Creating file “ACCOUNT COMMANDS A”
	Creating file “ACCOUNT RULE A”
```

Examine the files ACCOUNT COMMANDS and ACCOUNT RULE. They contain the converted account resource rules and ACF CHANGE subcommands to define VMACCT field values. Samples appear below.

ACCOUNT COMMANDS

CH ACFUSER  VMACCT(1)
CH MAINT    VMACCT(1)
CH OPERATOR VMACCT(2)
CH AUTOLOG1 VMACCT(9)

ACCOUNT RULE

$KEY(1) TYePE(ACT)
 UID(ACFUSER ) ALLOW
 UID(MAINT ) ALLOW
$KEY(2) TYPE(ACT)
 UID(OPERATOR ) ALLOW
$KEY(9) TYPE(ACT)
 UID(AUTOLOG1 ) ALLOW

Verify that these rule sets and CHANGE subcommands are set up correctly. If necessary, modify them. Also, check the rule entries to see if you can use masking to combine entries and reduce the length of the rule set.
Enter the following command to install the account records and rules in your Logonid and Infostorage databases:
```
ACFCVACT BUILD
```
ACFCVACT inserts rules and logonids into the CA ACF2 for z/VM databases. Messages appear indicating what ACFCVACT is inserting. When ACFCVACT installs the account records and rules on the logonid and Infostorage databases, it displays the following message:
```
Account record conversion complete
```