After starting the security tool the ID that is associated with z/OSMF
got suspended
CWWKS2909E: A SAF authentication or authorization attempt was rejected
because the server is not authorized to access the following SAF
resource: CLASS null. Internal error code 0x03008408.
Carmen
On 12/1/2021 9:09 AM, Carmen Vitullo wrote:
Not Mark but I wish I knew about this tool when I first installed and
configured z/OSMF back in 2.2 - we had tons of issues with security
and being a Top-Secret shop and my security folks setting this up the
way they 'thought' this should have been done, this tool would have
helped TONS
this works for my 2.3 systems
thanks
Carmen
On 12/1/2021 8:31 AM, Marna WALLE wrote:
Hi Mark,
May I recommend you take a look at the z/OSMF Security Configuration
Assistant? In short, the z/OSMF UI can help you understand what
security profiles are missing or users/groups have insufficient
authority.
https://www.ibm.com/docs/en/zos/2.5.0?topic=configuration-security-assistant-task
I've come to rely upon it heavily to understand what is and is not
set up correctly for security.
-Marna WALLE
z/OS System Install and Upgrade
IBM Poughkeepsie
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email tolists...@listserv.ua.edu with the message: INFO IBM-MAIN
--
/I am not bound to win, but I am bound to be true. I am not bound to
succeed, but I am bound to live by the light that I have. I must stand
with anybody that stands right, and stand with him while he is right,
and part with him when he goes wrong. *Abraham Lincoln*/
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
