Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

Clear

RACF

Showing 193

Convert RACF to UTF-8

It would be beneficial if RACF supported full UTF-8 natively, it would allow greater support for specialized characters in names and descriptions, it would also make communication with other systems much easier.
2 months ago in z/OS / RACF 2 Not under consideration

More Granular RACF Dataset member level access SAF checking

We have a PDS dataset where several application encrypted password files are housed. Splitting the contents of this PDS is not easily achievable. Can RACF architecture allow for an enhancement feature that performs dataset access SAF checks at the...
3 months ago in z/OS / RACF 0 Not under consideration

Extend the passphrase length to 128 bytes.

This will be useful for even better security.
3 months ago in z/OS / RACF 1 Not under consideration

Adding ONLYAT support in IRRSEQ00 and IRRSMO00

It's not an uncommon scenario that one LPAR is in an RRSF network but needs to have differences between it and other systems, so it would be really useful if the IRRSEQ00 and IRRSMO00 callable services supported the ONLYAT keyword, so we can autom...
about 1 month ago in z/OS / RACF 1 Not under consideration

Improve RACROUTE macro for REQUEST=FASTAUTH to MNOTE on missing WKAREA

RACROUTE REQUEST=FASTAUTH needs a second work area (WKAREA) that other requests like "auth" don't require (they just required the WORKA), the idea is to add a MNOTE, just like when the normal work area is missing:** ASMA254I *** MNOTE *** 154+ 12,...
2 months ago in z/OS / RACF 0 Not under consideration

Remove LNOTES segment from RACF

The LNOTES is virtually unused and irrelevant in the modern business. If we removed it would be easier to create products and APIs around RACF, it would also be less information new-to-z people would have to deal with.
8 months ago in z/OS / RACF 6 Not under consideration

RACF validation of external generated JWTs with fully OIDC support

Currently, RACF can only validate JWTs based on the IDTDATA definitions within RACF itself. In times of multi-platform solutions and higher security demands this is no longer adequate. Modern architectures consinsts of at least front ends and mayb...
10 months ago in z/OS / RACF 2 Not under consideration

RACF Extract API for JWTs (enhancement for ZOS-I-4417)

This is an additon for ZOS-I-4417, but it would also be usefull if it could be provided for the existing JWT validation... With RACF be able to validate JWTs, there should be a service avalable to extract the information out of the JWT after it go...
9 months ago in z/OS / RACF 1 Not under consideration

Check that RVARY password is regularly changed by administrator

In order to keep systems secure and avoid static unchanged password for RVARY commands it would be nice if we could audit the fact when RVARY password was last changed. In past it was visible that hash in RCVT changed, for security reasons is no l...
6 months ago in z/OS / RACF 3 Not under consideration

Connect command shouldn't have a default owner

Problem When you do connects in RACF and don't specify an owner it will default to the user id of whoever executed the command, this should be changed as it is not secure and can negatively affect uptime. This becomes an issue if a security admini...
7 months ago in z/OS / RACF 3 Not under consideration