Be aware that when the RACF OPERCMDS class is active, the IKJEFLN2 exit
has to be modified to construct a security token to pass to the MGCRE
service. 

AFAIK there is no way around this pre z/OS 1.11 


Rob Scott
Developer
Rocket Software
275 Grove Street * Newton, MA 02466-2272 * USA
Tel: +1.617.614.2305 
Email: rsc...@rs.com
Web: www.rocketsoftware.com

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Matan Cohen
Sent: 23 February 2010 13:40
To: IBM-MAIN@bama.ua.edu
Subject: Re: TSO reconnect (ikjefln2) reject by RACF

thanks, i'll check all of this

On Tue, Feb 23, 2010 at 3:34 PM, Elardus Engelbrecht < 
elardus.engelbre...@sita.co.za> wrote:

> Matan Cohen wrote:
>
> >yes ,  but if i will define the lla as a started task to RACF . I'm 
> >afraid
> this will
> make lla other security problems.
>
> Please provide examples or documentation of 'other security problems'.
>
> First time ever that I see LLA (IBM product, part of z/OS) and usage 
> of LLA are a security problem...
>
> Anyway, you can certainly give LLA a status of TRUSTED in STARTED class.
> This could perhaps resolve your OPERCMDS Class problem.
>
> Groete / Greetings
> Elardus Engelbrecht
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO 
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>



--
best regards,
matan cohen
MF System Administrator.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at 
http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to