The problem was that MAINT wasn't authorized to do things like DIRM SEND AUTHFOR CONTROL (at least that's how I interpreted it) -- thus the sledgehammer method..
Scott On Thu, Mar 26, 2009 at 1:58 PM, Kris Buelens <kris.buel...@gmail.com>wrote: > Or as for any control file: > -DIRM SEND AUTHFOR CONTROL > -RDRLIST; Receive; XEDIT, ... > -DIRM FILE AUTHFOR CONTROL > -DIRM RLDD > > But,for AUTHFOR CONTROL, an RLDD used not to be effective, a restart > was required. > > 2009/3/26 Scott Rohling <scott.rohl...@gmail.com>: > > or .. > > > > - DIRM SHUTDOWN > > - VMLINK DIRMAINT 1DF (WRITE INVOKE XEDIT AUTHFOR CONTROL > > - Add MAINT and any other ids > > - XAUTOLOG DIRMAINT > > > > Now you should be able to do what you want.. > > > > Scott > > > > > > On Thu, Mar 26, 2009 at 1:26 PM, Robert J Brenneman <bren...@gmail.com> > > wrote: > >> > >> Dirmaint command sets ( from VSMSERVE AUTHLIST ) and z/VM System > >> privclass ( from Q PRIVCLAS ) are not the same thing. They are not > >> even related to each other. > >> > >> If Maint is not authorized to issue the AUTHFOR command you have to > >> log directly onto DIRMAINT to do that. While youre in there , add your > >> personal id so you can make changes without having to get onto maint. > >> > >> You know - principle of least privilege and all. > >> > >> -- > >> Jay Brenneman > > > > > > > > -- > Kris Buelens, > IBM Belgium, VM customer support >
