If I recall correctly, DIAG D4 is the one that manipulates the secondary ID,
aka "Alternate ID".  (SECUSER is an old term).  Diag 88 provides the ability
to link minidisks and perform userid/password validations (if the issuer has
appropriate authority).

An interesting usage note for this is that DIAG D4 does not change the
userid associated with any existing (already active) SFS connections.  This
is because it is a CP function and manipulates the VMDBK.  Once set, future
connections (via APPC/VM Connect) will utilize the Alternate ID. ... This is
why severing all connections prior to setting the AltID will "fix" this type
of problem, because CMS will (re) connect and use the AltID.

If this is Nora's problem, an easy work around would be wrap the job with an
exec that uses DMSGETWU and DMSPUSWU to set a new default work unit that
contains the appropriate user, then run the job from the exec, then finally
reset with DMSPOPWU. (If I'm remembering all of this correctly)

John

--
John Hall
Safe Software, Inc.
727-608-8799
johnh...@safesoftware.com



On Tue, Apr 19, 2011 at 11:48 AM, Schuh, Richard <rsc...@visa.com> wrote:

>  Isn't that DIAG 88, instead of SECUSER?
>
>
> Regards,
> Richard Schuh
>
>
>
>
>  ------------------------------
> *From:* The IBM z/VM Operating System [mailto:IBMVM@LISTSERV.UARK.EDU] *On
> Behalf Of *John Hall
> *Sent:* Tuesday, April 19, 2011 6:41 AM
>
> *To:* IBMVM@LISTSERV.UARK.EDU
> *Subject:* Re: SFS problem
>
> Nora,
> Batch jobs normally run with the privileges of the "owner" of the job,
> using the SECUSER facility in z/VM.  With SFS, this can lead to unexpected
> results when a prior batch job leaves the worker with a connection to the
> filepool under a different user's id.  If the job ordering/selection of
> batch workers is somewhat random, you could see the outcome that you're
> experiencing (sometimes it works, sometimes it fails).
>
>

Reply via email to