Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

RACF

Showing 206

RACF throttling logon attempts before revoking

Protecting users having a password/passphrase from denial of service attack by implementing a timeout value between the failed logon attempts.
about 3 years ago in z/OS / RACF 1 Not under consideration

Prevent the user to activate all RACF cdt classes trying to list the active options

The way RACF is designed today, it doesn't allow an user to filter sort of options it has in effect. For example, if I want to list only the active classes, there isn't a filter for that suggesting I should use SETROPTS LIST to list everything. Th...
over 4 years ago in z/OS / RACF 4 Not under consideration

HealthCheck for RACF Class PROGRAM

In RACF-Class PROGRAM there are PROFILEs with MEMBER-Definitions,for example Profile ** with Members (for example) DB2.OLD.VERSION.SDSNLOAD.I would likte to get an automatic health-check of this RACF-Class. Maybe an Extention to IBMRACF,RACF_SENSI...
about 6 years ago in z/OS / RACF 4 Not under consideration

Enhance Type 80s so I can tell when a UNIX authority that requires UID(0) was actually used

I would like to see a new type 80 field that would actually tell me if a UID(0) used some UNIX authority that requires its UID(0) attribute. RACF type 80 records already has a bit to tell me if superuser authority was used but it needs to be granu...
almost 8 years ago in z/OS / RACF 2 Not under consideration

Create new ICH4xxI FETCHING PROGRAM program-name, FROM LIBRARY message - Improve Messages for Controlled Environments

Enhance IRRENS00 to add an additional message to always ensure an ICH message is issued that contains the offending library name. I was in contact with Bruce Wells about this requirement in October. Bruce explains that his Contents Supervisor cont...
over 8 years ago in z/OS / RACF 2 Not under consideration

RACF Granular Control for encryption of basic and large format datasets

Allow RACF Dataset Profiles with an encryption key in the DFP segment to provide a flag for whether basic or large format datasets should be encrypted.
over 3 years ago in z/OS / RACF 0 Future consideration

List all SEGMENTS from LISTUSER or LISTGRP command

Using RACF Commands LISTUSER and LISTGRP there is no way to list all the segments on the User ID or Group without listing each segment name on the command. The request is to allow the use of ALL on the LISTUSER or LISTGRP command to list all segme...
over 3 years ago in z/OS / RACF 2 Not under consideration

Missing RACF Statistic (last connect date) when logging on with SESSION=OMVSSRV and SESSION=APPCTP

We need to monitor, if RACF users are active. So we verify the last connect date of user's default group every night. When last connect data is older than nn days, our night job will revoke this user profile. If the user still needs this profile, ...
about 3 years ago in z/OS / RACF 1 Future consideration

Limit UAUDIT logging

Provide a means to limit logging by UAUDIT users. Specifically, do not log DIRSRCH events for UAUDIT users.
almost 10 years ago in z/OS / RACF 1 Future consideration

Define the conflicting certificates have same public key within RACF database

RACF database should have certificates with same public key to be defined. As long as certificates have different serial number, they should be consider as different certificates. Since Digicert has created two intermediate CA which have different...
6 months ago in z/OS / RACF 1 Not under consideration