Synchronizing IBM RACF Data by using IBM Tivoli Directory Integrator

An IBM Redpaper publication

Published 16 May 2013, updated 25 July 2016

cover image

ISBN-10: 0738450138
ISBN-13: 9780738450131
IBM Form #: REDP-4460-00
(222 pages)

More options

Rate and comment

Authors: Karan Singh, Kris Buelens, David Druker, Conrad Peche, Benjamin Rogers


This IBM® Redpaper™ publication provides an example of a solution to synchronize an IBM RACF® user ID, password, and password phrase data between IBM z/OS® and IBM z/VM® systems, or just between z/VM systems. Topics that are covered are the installation and customization of IBM Tivoli® Directory Integrator, IBM Tivoli Directory Server, and RACF. Using this basic infrastructure, a sample Tivoli Directory Integrator configuration is presented, which allows for a flexible and extensible means for synchronizing RACF information.

Table of contents

Chapter 1. Introduction
Chapter 2. z/VM setup
Chapter 3. z/OS setup
Chapter 4. Additional configuration setup
Chapter 5. Testing the configuration
Appendix A. Sample files
Appendix B. RACF: LDAP field mappings
Appendix C. Additional material

Follow IBM Redbooks

Follow IBM Redbooks