The sign-on table migration utility

The sign-on table migration utility, DFHSNMIG, is provided to help you migrate security information defined in an SNT to the CICS® segment of a RACF® user's profile. For each user entry in the SNT it creates a CLIST of RACF commands, generating either an ADDUSER or an ALTUSER command as appropriate for each SNT user entry. Because the DFHSNT macro is not supported in CICS TS, you must assemble your SNT using an earlier version of CICS.

DFHSNMIG can be found as an APF-authorized program in CICSTS31.CICS.SDFHAUTH, and must be run from an APF-authorized library. If you invoke the program from TSO, add its name to the list of authorized program names in the AUTHPGM NAMES section in the IKJTSOxx member of SYS1.PARMLIB.

The DFHSNMIG utility creates a CLIST of ADDUSER and ALTUSER commands to define CICS users to RACF. These commands do not specify the default RACF group each user should belong to. You might want to edit the CLIST created by DFHSNMIG to add DFLTGRP information. See Defining terminal users and user groups to RACF for an example of specifying DFLTGRP on the ADDUSER command.

Figure 1 shows an example sign-on table entry. In this example, OLDUSER is an existing RACF-defined userid, and NEWUSER is a userid that has not previously been defined to RACF. DFHSNT TYPE=(ENTRY,DEFAULT) is a default entry, for which DFHSNMIG will not create an entry.
Figure 1. Sample sign-on table entry
SNT     DFHSNT TYPE=INITIAL
*
        DFHSNT TYPE=ENTRY,                                             *
               USERID=OLDUSER,                                         *
               OPIDENT=OLD,                                            *
               OPPRTY=255,                                             *
               OPCLASS=(1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,  *
               19,20,21,22,23,24),                                     *
               NATLANG=K,                                              *
               XRFSOFF=FORCE
*
        DFHSNT TYPE=ENTRY,                                             *
               USERID=NEWUSER,                                         *
               OPIDENT=NEW,                                            *
               OPPRTY=100,                                             *
               TIMEOUT=20,                                             *
               OPCLASS=(10)
*
        DFHSNT TYPE=(ENTRY,DEFAULT),                                   *
               OPIDENT=XXX,                                            *
               TIMEOUT=10
*
        DFHSNT TYPE=FINAL
         END
Figure 2 shows an example of output from DFHSNMIG, which has changed the SNT shown in Figure 1 into entries for the RACF database. For more information about running DFHSNMIG, see the CICS Operations and Utilities Guide.
Figure 2. Example of output from DFHSNMIG
/*--------------------------------------------------------*/
/*                                                        */
/* Migration of DFHSNT. (Created by DFHSNMIG utility.)    */
/* This CLIST will add CICS attributes into your RACF     */
/* database.  Please note that keywords are for RACF 1.9  */
/* and will not work against earlier versions of RACF.    */
/*                                                        */
/* You may need to edit this file before executing the    */
/* CLIST under a TSO userid that has SPECIAL authority.   */
/*                                                        */
/* ADDUSER: Asks RACF to create a new entry for the user. */
/* ALTUSER: Adds CICS attributes to an existing RACF user.*/
/*                                                        */
/* Userid   - Identifier for user.                        */
/* LANGUAGE - Preferred language:  ENU = English (US)     */
/*                                 JPN = Japanese         */
/* The CICS attributes are:                               */
/* OPCLASS  - Operator Class                              */
/* OPIDENT  - Operator Identifier                         */
/* OPPRTY   - Operator Priority                           */
/* TIMEOUT  - Timeout Value                               */
/* XRFSOFF  - FORCE or NOFORCE                            */
/*                                                        */
/*--------------------------------------------------------*/
/*--------------------------------------------------------*/
/* Details for                                   OLDUSER  */
/*--------------------------------------------------------*/
ALTUSER OLDUSER                                             +
  LANGUAGE(PRIMARY(JPN))                                    +
  CICS(                                                     +
     OPCLASS(1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,  +
      19,20,21,22,23,24)                                    +
     OPIDENT(OLD)                                           +
     OPPRTY(255)                                            +
     TIMEOUT(0)                                             +
     XRFSOFF(FORCE)                                         +
  )
/*--------------------------------------------------------*/
/* Details for                                   NEWUSER  */
/*--------------------------------------------------------*/
ADDUSER NEWUSER                                             +
  CICS(                                                     +
     OPCLASS(1,10)                                          +
     OPIDENT(NEW)                                           +
     OPPRTY(100)                                            +
     TIMEOUT(20)                                            +
     XRFSOFF(NOFORCE)                                       +
  )
/*--------------------------------------------------------*/
/* 00000002 entries successfully processed.               */
/*--------------------------------------------------------*/