Re: IEE345I command authority error from batch
- From: wfarrell@xxxxxxxxxxxx (Walt Farrell)
- Date: 28 Feb 2006 04:50:59 -0800
On 2/27/2006 4:04 PM, Bob Henry wrote:
I'm migrating to z/OS 1.6 from an OS/390 2.10 system where I had batch
jobs set up to issue MVS Modify commands to CICS. In the 1.6 system I
receive an IEE345I MODIFY AUTHORITY INVALID, FAILED BY MVS error using a
batch job which includes something like:
//CICSP1 COMMAND 'F CICSP1,''CEMT P SHUT IMM'''
No RACF messages are issued and even if they were, the OPERCMDS class for
MVS.MODIFY.JOB.** includes the group that the submitting userid belongs to
(list-of-groups is active).
What am I missing? What console or console group do I need to authorize to
issue MVS commands through batch?
It's not directly a RACF problem. If RACF OPERCMDS processing were causing the failure then
(a) you would see ICH408I messages and
(b) the IEE345I message would say "failed by RACF" rather than "failed by MVS".
It could be that your JES parms no longer allow commands from batch jobs, or that the OPERPARM segment for the user has the wrong authority level specified.
Walt Farrell, CISSP
z/OS Security Design, IBM
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
.
- References:
- IEE345I command authority error from batch
- From: Bob Henry
- IEE345I command authority error from batch
- Prev by Date: RE: Data Set Name "Hiding"
- Next by Date: Re: Esoterics set in SMS we are very quick to make HCD changes.
- Previous by thread: Re: IEE345I command authority error from batch
- Next by thread: RE: IEE345I command authority error from batch
- Index(es):
Relevant Pages
|
