A Field Mapping Between IBM RACF and Oracle Identity Manager

This appendix discusses the field mapping between IBM RACF and Oracle Identity Manager. It consists of the following topics:

• User Field Mapping

• Group Field Mapping

• Resource Profile Field Mapping

User Field Mapping

Table A-1 describes the user field mapping between Oracle Identity Manager and IBM RACF.

Table A-1 User Field Mapping

Oracle Identity Manager Gateway Field	IBM RACF Field	Description
uid	USER	User login ID
cn	NAME	User full name
sn	NAME	User last name
givenName	NAME	User first name
userPassword	PASSWORD	Password used to login
attributes	SPECIAL, AUDITOR, GPRACC, OPERATIONS	Attributes for the user
omvsHome	HOME	OMVS HOME Location attribute
omvsProgram	PROGRAM	OMVS Program attribute
omvsUid	UID	OMVS UID Attribute
owner	OWNER	The owner of the user profile
defaultGroup	DEFAULT-GROUP	Default group for the user
instdata	DATA	Installation-defined data for the user
createdate	CREATED	Date user was created
passwordDate	PASSDATE	Date the user password expires
passwordInterval	PASS-INTERVAL	The number of days a password remains valid for the user
revokeDate	REVOKE DATE	Future date the user will be prevented from accessing the system
resumeDate	RESUME DATE	Future date the user will be allowed access to the system again
memberOf	GROUP	Group information for the user
dataset	MODEL	Data set profile of the user
lastaccessdate	LAST-ACCESS	Last time the user accessed the system
lastconnectdate	LAST-CONNECT	Last time the user connected
tsoCommand	COMMAND	Command to be run during TSO/E logon
tsoDest	DEST	Default SYSOUT destination
tsoseclabel	SECLABEL	User's security label
tsoUnit	UNIT	Default UNIT name for allocations
tsoUserdata	USERDATA	Installation-defined data for the user
tsoAcctNum	ACCTNUM	Default TSO account number on the TSO/E logon panel
tsoHoldclass	HOLDCLASS	Default hold class
tsoJobclass	JOBCLASS	Default job class
tsoMaxSize	MAXSIZE	The maximum region size the user can request at logon
tsoMsgclass	MSGCLASS	Default message class
tsoProc	PROC	Default logon procedure on the TSO/E logon panel
tsoSize	SIZE	Minimum region size if not requested at logon
tsoSysoutclass	SYSOUTCLASS	Default SYSOUT class
revoke	NA	Value 'Y' if user is revoked or 'N' if user is resumed
waaccnt	WAACCNT	Account number for APPC/z/OS processing
waaddr1	WAADDR1	Address line 1 for SYSOUT delivery
waaddr2	WAADDR2	Address line 2 for SYSOUT delivery
waaddr3	WAADDR3	Address line 3 for SYSOUT delivery
waaddr4	WAADDR4	Address line 4 for SYSOUT delivery
wabldg	WABLDG	Building for SYSOUT delivery
wadept	WADEPT	Department for SYSOUT delivery
waname	WANAME	User name for SYSOUT delivery
waroom	WAROOM	Room for SYSOUT delivery

Group Field Mapping

Table A-2 describes the group field mapping between Oracle Identity Manager and IBM RACF.

Table A-2 Group Field Mapping

Oracle Identity Manager Field	IBM RACF Field	Description
cn	GROUP	The group ID
uniqueMember	USERS	The users associated to the group
owner	OWNER	The owner of the group
subgroups	SUBGROUPS	All groups associated with this group
instdata	DATA	The installation data for the group

Resource Profile Field Mapping

Table A-3 describes the resource profile field mapping between Oracle Identity Manager and IBM RACF.

Table A-3 Data Set Resource Profile Field Mapping

Oracle Identity Manager Field	IBM RACF Field	Description
cn	PROFILE NAME	The profile id
standardAccessList	ID,ACCESS,ACCESS COUNT	The standard access list of IDs and access for the data set
conditionalAccessList	ID,ACCESS,ACCESS COUNT	The conditional access list of IDs and access for the data set
owner	OWNER	The owner of the data set
auditing	AUDITING	Indicates whether auditing should be enabled
notify	NOTIFY	Indicates whether notification is enabled for any changes to resource profiles
instdata	DATA	The installation data for the data set