Re: Def alias error in RACF

-----Original Message-----
From: IBM Mainframe Discussion List On Behalf Of Carlos Cordero

Colleagues,


Somebody can help me to know what causes the next error at the moment
to define an Alias in a RACF environment with z/OS V1.7 release?

At the moment to send the request in command line (through the RACF
command 'define alias'); not with the idcams utility; appears the next
error:


Menu List Mode Functions Utilities Help

sssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss
sssssss ISPF Command Shell
Enter TSO or Workstation commands below:
===> def alias (name ('xm0007') relate ('UCATCOBD.USER'))
[ snip ]
IDC3018I SECURITY VERIFICATION FAILED+
IDC0014I LASTCC=12
IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS
IGG0CLFT-36
***

And of course, when we run the Define Alias through the idcams
utility,
its ok.

Actually, that's a TSO command, not a RACF command.

Is the same user ID issuing the TSO command as is running the batch
IDCAMS job? My first guess is that the TSO user issuing the DEFINE
ALIAS command does not have UPDATE authority to the master catalog,
while the batch user ID does. AFAIK, IDCAMS makes the same RACF checks
in either environment (TSO or batch).

If the same user ID is used in both cases, you might inspect PARMLIB
member IKJTSOnn to ensure that DEFINE (and DEF) are listed in the
AUTHCMD section.

-jc-




Thanks for your Help


Date: Wed, 14 Jan 2009 15:35:02 -0600> From: kirk@xxxxxxxxxxxx>
Subject: Re: Eclipse articles> To: IBM-MAIN@xxxxxxxxxxx> > Also of
interest may be the IBM JZOS Cookbook, which is a book and an> Eclipse
project containing lots of sample code.> It only requires that you
have
z/OS and the (free) z/OS Java SDK along with> free open source
software
such as Eclipse, Spring, Ant, Apache java tools,> etc. It is focused
on
using the JZOS batch launcher and toolkit (part of> the z/OS Java
SDK).
The examples in the cookbook can also be used in> conjunction with the
RDz IDE.> > The JZOS Cookbook is one of the downloads available from
the JZOS alphaworks> site:>
http://www.alphaworks.ibm.com/tech/zosjavabatchtk> > Questions on the
cookbook or sample project can be posted to the JZOS> alphaworks
"forum"> > Kirk Wolf> Dovetailed Technologies> > On Wed, Jan 14, 2009
at 8:21 AM, John McKown <joarmc@xxxxxxxxxx> wrote:> > > I know this is
not directly applicable. However, there may be mainframe> > shops
which
are using the RDz (or whatever IBM is calling it this week) IDE> > in
addition to ISPF. RDz is based on Eclipse. I've never gotten the hang
of> > Eclipse. These articles may help.> >> >> >

http://www.ibm.com/developerworks/views/opensource/libraryview.jsp?sear
ch_by=mastering+eclipse+v3.4> >> > Tiny URL:
http://preview.tinyurl.com/9u5phz> >> > --> > John> >> >
--------------
--------------------------------------------------------> > For IBM-
MAIN subscribe / signoff / archive access instructions,> > send email
to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO> > Search
the archives at http://bama.ua.edu/archives/ibm-main.html> >> >
-------
---------------------------------------------------------------> For
IBM-MAIN subscribe / signoff / archive access instructions,> send
email
to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO> Search
the
archives at http://bama.ua.edu/archives/ibm-main.html
_________________________________________________________________
Chatea en Messenger desde Hotmail.
http://download.live.com
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
.

Relevant Pages

  • RE: Command field in TSO/E Logon screen
    ... It will print your TSO segmemnt. ... COMMAND is a field in this segment. ... It looks like the data in the other fields comes from RACF. ... Search the archives at http://bama.ua.edu/archives/ibm-main.html ...
    (bit.listserv.ibm-main)
  • Re: tso racf
    ... Just add the command 'LOGOFF' within thier TSO segment of RACF. ... Search the archives at http://bama.ua.edu/archives/ibm-main.html ...
    (bit.listserv.ibm-main)
  • Re: OT: the rm bug hit me again
    ... And the -f in the rm command it to stop the "Confirm delete?" ... My rm is set to confirm all deletes using alias. ... the reason is to help prevent those type human errors when you are root ... I personally like the prompt because it reminds me that I am running as ...
    (Fedora)
  • Re: ICH409I 283-054 ABEND DURING FRACINIT PROCESSING
    ... The command will fail (only on the RACF LPAR) if issued ... from a Top Secret LPAR. ... Also, and just for my own curiosity, have you tried routing a command ... isn't providing any security information on the routed command. ...
    (bit.listserv.ibm-main)
  • Re: OT: the rm bug hit me again
    ... And the -f in the rm command it to stop the "Confirm delete?" ... That's not a good idea as it teaches you to expect to be prompted, and you'll be bitten badly some time when the alias isn't present. ... the reason is to help prevent those type human errors when you are root ... A user who expects rm to prompt will only delete their own files if it doesn't, a root user who expects rm to prompt can delete the entire system if it doesn't. ...
    (Fedora)