> -----Original Message----- > From: Walt Farrell [mailto:[EMAIL PROTECTED] > Sent: Thursday, August 30, 2007 11:16 AM > To: [email protected] > Subject: Re: Password expiration message at every SUBMIT at z/OS 1.8? > > Prior to z/OS R8, the RACROUTE REQUEST=VERIFYX that JES issues to > "authenticate" the job as it's read in occurred in the JES address space. > > Effective with z/OS R8 that processing now happens in the submitter's > address space, which can result in messages coming out on a TSO session > that used to only come out in the job log, if the security product > recognizes that it was called from a TSO session and decides to issue a > TPUT or WTO with route code 11. > > I think this might also occur in RACF, unless we've fixed it. We did fix > one such case, but might have others that remain. > > This is something you'll need to address with the CA support folks, but > this should at least get you/them started down the right path.
Thanks Walt. CA support did already return a prompt response to our security staff indicating the same root cause you have described. There is a TSS suppression option, but I have requested our security team to check if that suppresses the message at all times or just at SUBMIT time. We would not want the message suppressed at all times, just at SUBMIT time, so if the option is "always suppress" we will just have to live with the changed behavior for now. Thanks again for your help. Peter This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
