Modifying the EXLIST list
The EXLIST DD statement is used to define a dataset(s) that contains a list of userids and/or groupids that Mainframe Connector will be excluded from processing requests against. At Mainframe Connector startup, the contents of the EXLIST datasets(s) are copied to an in-storage list which exists, and governs EXLIST-related processing, while Mainframe Connector is active. If outbound requests are being checked (LISTCHECK=INOUT or LISTCHECK=OUTBOUNDONLY), the z/OS based password reset requests will be assessed by Mainframe Connector to determine if the requesting userid is in an active EXLIST and if it is, the request will not be forwarded to the Bravura Pass server for strength validation and synchronization. If inbound requests are being checked (LISTCHECK=INOUT or LISTCHECK=INBOUNDONLY), Bravura Pass server driven reset, resetexpire, and expire requests will be assessed by Mainframe Connector to determine if the target userid is in an active EXLIST and if it is, the request will not proceed.
A number of operator commands are available to dynamically influence the contents of this list and how it is to be interpreted.
Adding a userid to the EXLIST list
The MODIFY command can be used to dynamically add a userid to the EXLIST list.
Syntax:
MODIFY mfc ,ADD,EXCLUDEUSER= userid F mfc ,ADD,EXCLUDEUSER= userid
Where userid indicates the userid that should be added to the EXLIST list. Optional Run-time parameters describes acceptable syntax for userid.
If EXLIST dataset(s) were absent from the Mainframe Connector startup JCL, or ignored because of the mutual exclusivity of INLIST and EXLIST as described earlier in this guide; the first ADD command will dynamically create an in-storage EXLIST as described previously. If an INLIST is already active, this EXLIST will initially be deactivated because of the aforementioned mutual exclusivity.
Removing a userid from the EXLIST list
The MODIFY command can be used to dynamically remove a userid from the EXLIST list.
Syntax:
MODIFY mfc ,DEL,EXCLUDEUSER= userid F mfc ,DEL,EXCLUDEUSER= userid
Where userid indicates the userid that should be removed from the EXLIST list.
If the specified userid is not currently included in the EXLIST list or EXLIST processing is currently not active, a message is issued and processing continues.
Adding a groupid to the EXLIST list
The MODIFY command can be used to dynamically add a groupid to the EXLIST list.
Syntax:
MODIFY mfc,ADD,EXCLUDEGROUP=groupid F mfc,ADD,EXCLUDEGROUP=groupid
Where groupid indicates the groupid that should be added to the EXLIST list.
If EXLIST dataset(s) were absent from the Mainframe Connector startup JCL, or ignored because of the mutual exclusivity of INLIST and EXLIST as described earlier in this guide; the first ADD command will dynamically create an in-storage EXLIST as described previously. If an INLIST is already active, this EXLIST will initially be deactivated because of the aforementioned mutual exclusivity.
Removing a groupid from the EXLIST list
The MODIFY command can be used to dynamically remove a groupid from the EXLIST list.
Syntax:
MODIFY mfc,ADD,EXCLUDEGROUP= groupid F mfc,ADD,EXCLUDEGROUP= groupid
Where groupid indicates the groupid that should be removed from the EXLIST list.
If the specified groupid is not currently included in the EXLIST list or EXLIST processing is currently not active, a message is issued and processing continues.
Disabling an active EXLIST list
The MODIFY command can be used to dynamically disable an active EXLIST list.
Syntax:
MODIFY mfc,DEL,EXCLUDEGROUP= groupid F mfc,DEL,EXCLUDEGROUP= groupid
Using this command will disable EXLIST list validation.
If EXLIST list processing is not currently active, a message is issued and processing continues.
Enabling a deactivated EXLIST list
The MODIFY command can be used to dynamically enable a deactivated EXLIST list.
Syntax:
MODIFY mfc,REACTIVATE,EXLIST F mfc,REACTIVATE,EXLIST
Using this command will re-enable EXLIST validation.
If EXLIST list processing is already active or did not previously exist, a message is issued and processing continues.
If INLIST list processing is already active, the command will be disallowed and a message issued, because of the mutual exclusivity of INLIST and EXLIST as described earlier in this guide. It will first be necessary to deactivate the INLIST.
Reloading the EXLIST list
The MODIFY command can be used to reload the EXLIST list from the EXLIST DD dataset concatenation.
Syntax:
MODIFY mfc,RELOAD,EXLIST F mfc,RELOAD,EXLIST
Using this command causes Mainframe Connector to create a new copy of the EXLIST list from the current contents of the datasets in the EXLIST DD concatenation. This command permits sites to update their static EXLIST datasets and activate the contents of those datasets dynamically. To get the expected results, the EXLIST DD concatenation must be kept to a maximum of 32 DD statements.
If no EXLIST list processing was active, a message is issued and processing continues.
Note that RELOAD will nullify updates resulting from any prior ADD or DEL commands issued against the EXLIST list unless the EXLIST dataset(s) are updated as well (eg. - via ISPF EDIT) to reflect the ADD or DEL changes prior to issuance of the RELOAD.