You add the node where node is the local JES node name as a member in the &RACLNDE profile in the RACFVARS class.
All this does is specify that the node is local to the RACF data base. Lou -- Artificial Intelligence is no match for Natural Stupidity - Unknown On Wed, May 20, 2020 at 4:21 PM Charles Mills <charl...@mcn.org> wrote: > I asked this question this morning on RACF-L and got not a whimper. Perhaps > it is a JES2 question and not a RACF question? > > I am issuing a JES2 $DQ command from a Rexx EXEC running under IKJEFT01. It > is all working but for every command issued I am getting > > ICH70007I USER AUTHORITY CANNOT BE USED FOR THIRD-PARTY > AUTHORIZATION CHECK FOR USER (userid ) GROUP (SYS1 ) > BECAUSE THE EXECUTION NODE (mynode) IS NOT LOCAL. > UACC WILL BE USED. > > I have read the description of the message > > https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.2.0/com.ibm.zos.v2r2 > .icha600/ich70007i.htm but I don't understand any more than I did before. I > am *not* getting ICH408I so I guess that is why it is all working. > > AFAIK 'mynode' *is* the local LPAR. I am not specifying any node in my > CONSOLE ACTIVATE/CART/ADDRESS CONSOLE. > > $HASP826 NODE(1) > $HASP826 NODE(1) NAME=mynode,STATUS=(OWNNODE),TRANSMIT=BOTH, > $HASP826 RECEIVE=BOTH,HOLD=NONE > > Can someone explain what the message means and how to make it go away? > > I see "make sure that the node is defined to the &RACLNDE profile in the > RACFVARS class." How do I do that and what are the risks? > > As you can tell, I am not a RACF admin, only playing one in my spare time. > > Thanks, > Charles > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN