RE: IEE345I command authority error from batch

Hello,

We had the same problem when we went to Z/OS 1.6. I found that the
Command Program was clearing MCSOPPRM which includes the MCS Authority.
I turned it back on with the intruction 'OI MCSOATH1,MCSOMSTR' in the
Assembler Program. Might be a place to look at.


Thanks...Guy M. Gates Jr.
TTI Z/OS Systems Programmer
Phone: (817) 740-9000 x-4627
Email: guy.gates@xxxxxxxxxx

"Z/OS - World-Class Software, Supporting
World-Class Business"

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@xxxxxxxxxxxx
Behalf Of R.S.
Sent: Monday, February 27, 2006 4:00 PM
To: IBM-MAIN@xxxxxxxxxxx
Subject: Re: IEE345I command authority error from batch

Bob Henry wrote:

I'm migrating to z/OS 1.6 from an OS/390 2.10 system where I had batch

jobs set up to issue MVS Modify commands to CICS. In the 1.6 system I
receive an IEE345I MODIFY AUTHORITY INVALID, FAILED BY MVS error
using a
batch job which includes something like:

//CICSP1 COMMAND 'F CICSP1,''CEMT P SHUT IMM'''

No RACF messages are issued and even if they were, the OPERCMDS class
for
MVS.MODIFY.JOB.** includes the group that the submitting userid
belongs to (list-of-groups is active).

What am I missing? What console or console group do I need to
authorize to issue MVS commands through batch?

Try any other command i.e D A,L.
If it fails also then I'd suggest to check OPERCMDS class (is it active
and RACLISTED, profiles, etc.), also check JES2PARM - the option has
three settings: allow commands, deny commands, ask operator.

If D A,L is working then I'd suggest CICS definitions (console names).

--
Radoslaw Skorupka
Lodz, Poland

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send
email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO Search
the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
.

Relevant Pages

  • Re: Why isnt OMVS command integrated with ISPF?
    ... the operator never needs to press ATTN before entering a command. ... you can now run a true z/OS console on a VTAM ... z/OS Unix session, if only to see how externalsbehaves under Unix. ...
    (bit.listserv.ibm-main)
  • Re: zOS 1.8 and One Byte Console ID
    ... AUTHORITY INVALID, FAILED BY MVS ... What console is issuing the start command? ... I forgot that we don't always put the console name in there. ...
    (bit.listserv.ibm-main)
  • Re: FTP between our 2 HP3000s failing intermittently
    ... Cobol program do I then issue the command to SAVE ... FTP server that's the ... Services Authority ...
    (comp.sys.hp.mpe)
  • Re: zOS 1.8 and One Byte Console ID
    ... AUTHORITY INVALID, FAILED BY MVS ... What console is issuing the start command? ... I forgot that we don't always put the console name in there. ...
    (bit.listserv.ibm-main)
  • Re: file list command?
    ... QADBXLFI is used only because it is generally authorized; the physical data is in QADBXREF. ... Some existing VIEW may not have access to the DBXTYP, and creating a VIEW on QADBXREF requires *ALLOBJ special authority. ... The above could be done embedded in REXX or performed at a command line using the DB2 command within QSHell, having the output directed to STDOUT. ...
    (comp.sys.ibm.as400.misc)