Does RACF require authorization for a SEND CP or the NETSTAT command, as well? The basic FOR command, in the absence of an ESM, just requires class C, does it not?
Regards, Richard Schuh ________________________________ From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of gclo...@br.ibm.com Sent: Wednesday, August 18, 2010 1:06 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Closing the console on TCPIP Frank: "FOR" needs an aditional setup. Or you will get the HCP070E msg. My test: FOR TCPIP CMD CP CLOSE CON HCPFOR070E You are not authorized to act FOR TCPIP Maint(00070); T=0.01/0.01 17:09:42 m op cmd for TCPIP CMD CP CLOSE CON Maint; T=0.01/0.01 17:09:49 HCPFOR070E You are not authorized to act FOR TCPIP See the msg help: HCP070E You are not authorized to act FOR userid Explanation: If an external security manager (ESM) is installed, you must be authorized by the ESM to use the FOR command. If an ESM is not installed, you must be authorized as the secondary user on the CONSOLE statement in the directory entry of the target virtual machine. You may also be authorized as a result of the target virtual machine's use of the CP SET SECUSER command. System Action: The FOR command is not executed. System operation continues. User Response: Acquire the necessary authorization or privilege level in order to issue the FOR command. Regards, Clovis. [cid:1__=0CBBFD10DFFD1BD18f9e8a93df938@br.ibm.com]"Frank M. Ramaekers" ---18/08/2010 16:41:49---What about "FOR TCPIP CMD CP CLOSE CON"? No need for SET SECUSER. From: "Frank M. Ramaekers" <framaek...@ailife.com> To: IBMVM@LISTSERV.UARK.EDU Date: 18/08/2010 16:41 Subject: Re: Closing the console on TCPIP Sent by: The IBM z/VM Operating System <IBMVM@LISTSERV.UARK.EDU> ________________________________ What about "FOR TCPIP CMD CP CLOSE CON"? No need for SET SECUSER. Frank M. Ramaekers Jr. ________________________________ From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On Behalf Of gclo...@br.ibm.com Sent: Wednesday, August 18, 2010 2:36 PM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: Closing the console on TCPIP Hi, I use 'CP SEND CP TCPIP CLOSE CONS' No need to set SECUSER. It was configured into PROP as part of the Midnight process (HCPMID6001I msg) , to close all consoles daily. Regards, Clovis. "Wandschneider, Scott" ---18/08/2010 16:16:45---Does anybody have a way of "closing" the console spool file for a running, active TCPIP guest. I hav From: "Wandschneider, Scott" <scott.wandschnei...@infocrossing.com> To: IBMVM@LISTSERV.UARK.EDU Date: 18/08/2010 16:16 Subject: Closing the console on TCPIP Sent by: The IBM z/VM Operating System <IBMVM@LISTSERV.UARK.EDU> ________________________________ Does anybody have a way of "closing" the console spool file for a running, active TCPIP guest. I have tried the following, no errors but it does not close the file. /* */ 'CP SET SECUSER TCPIP *' Sleep 02 sec 'CP SEND TCPIP CP SPOOL CONSOLE CLOSE' Sleep 02 sec 'CP SET SECUSER TCPIP RESET' Exit Thank you, Scott R Wandschneider :847.849.7223 || : scott.wandschnei...@infocrossing.com **Think Green - Please print responsibly***: 402.963.8905 || *Senior Systems Programmer|| Infocrossing, a Wipro Company || 11707 Miracle Hills Drive, Omaha, NE, 68154-4457|| _____________________________________________________ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at privacy...@ailife.com.
