Once upon a time long ago, prior to ICH303/304 (the same type of messages but for lack of usage revoking), we had a classified system that was not being used but was kept around in case we needed historical information from it. One operator IPLd weekly to perform the disaster backups. Eventually, we needed the info. All IDs, save the one operator, were expired. Since 303/304 were not in place, even the RACF and OS admins were revoked. Fortunately, the operator was starting Omegamon, which I used to zap his ACEE and give him special to resume a RACF admin.
Bottom line - there is a reason for 301/302 and 303/304. You will notice that they are the only messages for the verify function. Dennis Roach GHG Corporation Lockheed Martin Mission Services Facilities Design and Operations Contract NASA/JSC Address: 2100 Space Park Drive LM-15-4BH Houston, Texas 77058 Mail: P.O. Box 58487 Mail Code H4C Houston, Texas 77258 Phone: Voice: (281)336-5027 Cell: (713)591-1059 Fax: (281)336-5410 E-Mail: dennis.ro...@lmco.com All opinions expressed by me are mine and may not agree with my employer or any person, company, or thing, living or dead, on or near this or any other planet, moon, asteroid, or other spatial object, natural or manufactured, since the beginning of time. > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On > Behalf Of Linda Mooney > Sent: Wednesday, July 29, 2009 8:16 PM > To: IBM-MAIN@bama.ua.edu > Subject: Special RACF users and message ICH301I > > Greetings! > > > > This didn't used to be a big deal when we had 24x7 operations support, > but those were the days. Now we just have dayshift and swing. We > don't have an automation product and cannot purchase any software > during these budget times. > > > > Our RACF folks have the special attribute and they don't get revoked if > they forget their password. Instead this message is posted to the > console - > > > > ICH301I MAXIMUM PASSWORD ATTEMPTS BY SPECIAL USER userid > > > > * nn ICH302D REPLY Y TO ALLOW ANOTHER ATTEMPT OR N TO REVOKE USER > userid > > > > While the WTOR is posted, nobody else can log on either. Does anyone > know of a way to 'automate' a reply to this message without an > automation product? > > > TIA, > > > > Linda Mooney > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
