Implementing the DVHXFA exit In this example, you implement the  DVHXFA EXEC  exit to ensure it works as expected.  Complete the following steps: FOR_AUTHORIZATION_CHECKING_EXIT= DVHXFA EXEC Example 6-5 shows the results when administrator EDI attempted to work on system user  IDs. Example 6-5 Run DirMaint commands when the DVHXFA exit is in place dirm for userbob review DVHXMT1191I Your REVIEW request has been sent for processing to DIRMAINT DVHXMT1191I at ITSOZVM1. Ready; T=0.01/0.01 17:18:40  DVHREQ2288I Your REVIEW request for USERBOB at * has been accepted. RDR FILE 0237 SENT FROM DIRMAINT PUN WAS 6593 RECS 0028 CPY 001 A NOHOLD NOKEEP  DVHREQ2289I Your REVIEW request for USERBOB at * has completed; with  DVHREQ2289I RC = 0. dirm for lnxs0030 review DVHXMT1191I Your REVIEW request has been sent for processing to DIRMAINT DVHXMT1191I at ITSOZVM1. Ready; T=0.01/0.01 17:19:11 DVHREQ2288I Your REVIEW request for LNXS0030 at * has been accepted. RDR FILE 0241 SENT FROM DIRMAINT PUN WAS 6597 RECS 0045 CPY 001 A NOHOLD NOKEEP DVHREQ2289I Your REVIEW request for LNXS0030 at * has completed; with RC DVHREQ2289I = 0. dirm for lnxs0038 review DVHXMT1191I Your REVIEW request has been sent for processing to DIRMAINT DVHXMT1191I at ITSOZVM1.  DVHREQ2287E User EDI at ITSOZVM1 is not authorized to act for LNXS0038 DVHREQ2287E at *; your request is ignored.  dirm for maint710 review DVHXMT1191I Your REVIEW request has been sent for processing to DIRMAINT DVHXMT1191I at ITSOZVM1.  DVHREQ2287E User EDI at ITSOZVM1 is not authorized to act for MAINT710  DVHREQ2287E at *; your request is ignored.  1. Install the files onto the DIRMAINT 11F disk by running  DIRM FILE  (specifying the  destination file mode of D to make sure that they went to 11F instead of the 191): 2. Add the correct entry to the  CONFIG* DATADVH  file set to activate the exit: 3. You have a  CONFIGAA DATADVH  file that contains all the local changes, so add the line there  by running  DIRM SEND , receive, edit, and the run  DIRM FILE . 4. Activate the altered configuration by running  DIRM RLDData  to put the exit into service.  5. Remove the authorization for the Linux administrators from  AUTHFOR CONTROL  by using a  bulk update by using the SEND-receive-edit-FILE-RLDD method. 6. Ensure that the administrators can do what they need. In this example, the administrator  EDI was permitted to administer only the groups CMSGRP and LNX1GRP. LNX1GRP  contained the user LNXS0030, but another user LNXS0038 was in a different group. The  CMS user USERBOB was part of CMSGRP.  DIRM FILE DVHXFA EXEC A = = D DIRM FILE USR2GRP DIRMFILE A = = D DIRM FILE GRP2ADM DIRMFILE A = = D 166  Securing Your Cloud: IBM Security for LinuxONE