Set Up OMVS Segment

Defining UNIX System Services Authorization › Set Up OMVS Segment

Set Up OMVS Segment

Use this procedure to set up an OMVS segment.

Follow these steps:

Assign an OMVS UID number to each user ID. If your security administrator does not have a policy for assigning OMVS UID numbers, use a unique number.
Note: For more information about OMVS UID numbers, see the IBM UNIX System Services Planning guide.
Define the OMVS segment for the user. For a user ID uuuuuuu and UID number nnn, enter the following commands:
- For CA ACF2 for z/OS systems, enter the following commands:
```
SET PROFILE(USER) DIV(OMVS)
INSERT uuuuuuu UID(nnn) HOME(/) PROGRAM(/bin/sh)
```
- For CA Top Secret for z/OS systems, enter the following commands:
```
TSS ADD(uuuuuuu) HOME(/) OMVSPGM(/bin/sh) UID(nnn)
GROUP(OMVSGRP)    
```
- For RACF systems, enter the following command:
```
ALU uuuuuuu OMVS(UID(nnn) HOME(/) PROGRAM(/bin/sh))
```
Note: The OMVS segment must contain a home directory (HOME) and a login shell (PROGRAM or OMVSPGM).
Complete this process for each user ID that you want to authorize. To confirm the contents of the OMVS segment, enter the following commands:
- For CA ACF2 for z/OS systems, enter the following commands:
```
SET PROFILE(USER) DIV(OMVS)
LIST uuuuuu
```
- For CA Top Secret for z/OS systems, enter the following command:
```
TSS LIS(uuuuuu) DATA(ALL) 
```
- For RACF systems, enter the following command:
```
LISTUSER uuuuuu OMVS NORACF
```
Assign a home directory to each user ID, and ensure that it exists and that the UID has at least READ access to it.
You can use the UNIX root directory (/) as shown in Step 2, or you can use a customized home directory name.

For example, to set up a directory named /u/name for UIDnnn, issue the following commands in the OMVS UNIX shell:
```
mkdir /u/name
chown nnn /u/name
chmod 777 /u/name
```
Confirm the owner and access to the directory by using the following command:
```
ls -ld /u/name
```
The following result appears:
```
drwxrwxrwx   2 user  group  8192 Sep  31 14:58 /u/name
```