On 2/27/2006 4:04 PM, Bob Henry wrote:
I'm migrating to z/OS 1.6 from an OS/390 2.10 system where I had batch
jobs set up to issue MVS Modify commands to CICS. In the 1.6 system I
receive an IEE345I MODIFY AUTHORITY INVALID, FAILED BY MVS error using a
batch job which includes something like:
//CICSP1 COMMAND 'F CICSP1,''CEMT P SHUT IMM'''
No RACF messages are issued and even if they were, the OPERCMDS class for
MVS.MODIFY.JOB.** includes the group that the submitting userid belongs to
(list-of-groups is active).
What am I missing? What console or console group do I need to authorize to
issue MVS commands through batch?
It's not directly a RACF problem. If RACF OPERCMDS processing were
causing the failure then
(a) you would see ICH408I messages and
(b) the IEE345I message would say "failed by RACF" rather than "failed
by MVS".
It could be that your JES parms no longer allow commands from batch
jobs, or that the OPERPARM segment for the user has the wrong authority
level specified.
Walt Farrell, CISSP
z/OS Security Design, IBM
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
