Modifying the INLIST list
The INLIST DD statement is used to define a dataset(s) that contains a list of userids and/or groupids that Mainframe Connector will be permitted to process requests against. At Mainframe Connector startup, the contents of the INLIST datasets(s) are copied to an in-storage list which exists, and governs INLIST-related processing, while Mainframe Connector is active. If outbound requests are being checked (LISTCHECK=INOUT or LISTCHECK=OUTBOUNDONLY), the z/OS based password reset requests will be assessed by Mainframe Connector to determine if the requesting userid is in an active INLIST and if it is, the request will be forwarded to the Bravura Pass server for strength validation and synchronization. If inbound requests are being checked (LISTCHECK=INOUT or LISTCHECK=INBOUNDONLY), Bravura Pass server driven reset, resetexpire, and expire requests will be assessed by Mainframe Connector to determine if the target userid is in an active INLIST and if it is, the request will proceed.
A number of operator commands are available to dynamically influence the contents of this list and how it is to be interpreted.
Adding a userid to the INLIST list
The MODIFY command can be used to dynamically add a userid to the INLIST list.
Syntax:
MODIFY mfc ,ADD,INCLUDEUSER= userid F mfc ,ADD,INCLUDEUSER= userid
Where userid indicates the userid that should be added to the INLIST list. Subsection 7.1.2 describes acceptable syntax for userid.
If INLIST dataset(s) were absent from the Mainframe Connector startup JCL, the first ADD command will dynamically create an in-storage INLIST as described previously. If an EXLIST is already active, the initial status of this INLIST will be deactivated because of the mutual exclusivity of INLIST and EXLIST as described earlier in this guide.
Removing a userid from the INLIST list
The MODIFY command can be used to dynamically remove a userid from the INLIST list.
Syntax:
MODIFY mfc ,DEL,INCLUDEUSER= userid F mfc ,DEL,INCLUDEUSER= userid
Where userid indicates the userid that should be removed from the INLIST list.
If the specified userid is not currently included in the INLIST list or INLIST processing is currently not active, a message is issued and processing continues.
Adding a groupid to the INLIST list
The MODIFY command can be used to dynamically add a groupid to the INLIST list.
Syntax:
MODIFY mfc ,ADD,INCLUDEGROUP= groupid F mfc ,ADD,INCLUDEGROUP= groupid
Where ’groupid’ indicates the groupid that should be added to the INLIST list.
If INLIST dataset(s) were absent from the Mainframe Connector startup JCL, the first ADD command will dynamically create an in-storage INLIST as described previously. If an EXLIST is already active, the initial status of this INLIST will be deactivated because of the mutual exclusivity of INLIST and EXLIST as described earlier in this guide.
Removing a groupid from the INLIST list
The MODIFY command can be used to dynamically remove a groupid from the INLIST list.
Syntax:
MODIFY mfc ,DEL,INCLUDEGROUP= groupid
F mfc ,DEL,INCLUDEGROUP= groupid
Where ’groupid’ indicates the groupid that should be removed from the INLIST list.
If the specified groupid is not currently included in the INLIST list or INLIST processing is currently not active, a message is issued and processing continues.
Disabling an active INLIST list
The MODIFY command can be used to dynamically disable an active INLIST list.
Syntax:
MODIFY mfc ,DEACTIVATE,INLIST F mfc ,DEACTIVATE,INLIST
Using this command will disable INLIST list validation.
If INLIST list processing is not currently active, a message is issued and processing continues.
Enabling a deactivated INLIST list
The MODIFY command can be used to dynamically enable a deactivated INLIST list.
Syntax:
MODIFY mfc ,REACTIVATE,INLIST F mfc ,REACTIVATE,INLIST
Using this command will re-enable INLIST validation.
If INLIST list processing is already active or did not previously exist, a message is issued and processing continues.
If EXLIST list processing is already active, the command will be disallowed and a message issued, because of the mutual exclusivity of INLIST and EXLIST as described earlier in this guide. It will first be necessary to deactivate the EXLIST.
Reloading the INLIST list
The MODIFY command can be used to reload the INLIST list from the INLIST DD dataset concatenation.
Syntax:
MODIFY mfc ,RELOAD,INLIST F mfc ,RELOAD,INLIST
Using this command causes Mainframe Connector to create a new copy of the INLIST list from the current contents of the datasets in the INLIST DD concatenation. This command permits sites to update their static INLIST datasets and activate the contents of those datasets dynamically. To get the expected results, the INLIST DD concatenation must be kept to a maximum of 32 DD statements.
If no INLIST list processing was active, a message is issued and processing continues.
Note that RELOAD will nullify updates resulting from any prior ADD or DEL commands issued against the INLIST list unless the INLIST dataset(s) are updated as well (eg. - via ISPF EDIT) to reflect the ADD or DEL changes prior to issuance of the RELOAD.