Set Up OMVS Segment

Defining UNIX System Services Authorization › Set Up OMVS Segment

Set Up OMVS Segment

Use this procedure to set up an OMVS segment.

To set up an OMVS segment

Choose an OMVS UID number to associate with each user ID. Your security administrator may have a policy for assigning OMVS UID numbers. If not, use a unique number.
Note: For more information about OMVS UID numbers, see IBM's UNIX System Services Planning guide.
Define the OMVS segment for the user. For a user ID uuuuuuu and UID number nnn, enter the following commands:
- For CA ACF2 for z/OS systems, enter the following commands:
```
SET PROFILE(USER) DIV(OMVS)
INSERT uuuuuuu UID(nnn) HOME(/) PROGRAM(/bin/sh)
```
- For CA Top Secret for z/OS systems, enter the following commands:
```
TSS ADD(uuuuuuu) HOME(/) OMVSPGM(/bin/sh) UID(nnn)
GROUP(OMVSGRP)    
```
- For RACF systems, enter the following command:
```
ALU uuuuuuu OMVS(UID(nnn) HOME(/) PROGRAM(/bin/sh))
```
Note: The OMVS segment must contain the following:
- A home directory (HOME)
- A login shell (PROGRAM or OMVSPGM)
Ensure that you have completed this process for each user ID that you want to authorize. To confirm the contents of the OMVS segment enter the following commands:
- For CA ACF2 for z/OS systems, enter the following commands:
```
SET PROFILE(USER) DIV(OMVS)
LIST uuuuuu
```
- For CA Top Secret for z/OS systems, enter the following command:
```
TSS LIS(uuuuuu) DATA(ALL) 
```
- For RACF systems, enter the following command:
```
LISTUSER uuuuuu OMVS NORACF
```
Choose a home directory to associate with each user ID, and ensure that it exists and that the UID has at least read access to it.
You can use the UNIX root directory (/) as shown in step 2, or you can use a customized home directory name.

For example, to set up a directory called /u/name for UIDnnn, issue the following commands in the OMVS UNIX shell:
```
mkdir /u/name
chown nnn /u/name
chmod 777 /u/name
```
Confirm the owner and access to the directory by using the following command:
```
ls -ld /u/name
```
The following result appears:
```
drwxrwxrwx   2 user  group  8192 Sep  31 14:58 /u/name
```
If you have previously installed this product and have authorized the UNIX shell, remove the previous authorization by using the following command:
```
extattr -a/bin/sh
```