Re: NDM RACF002 Error But No Password Used

2013-04-17 Thread Biller, Charles A (CHUCK)
Release 5. User reports he's not aware of a password change attempt. The 
credentials are in a sysin
and even though the racf id is protected (no password) the ndm statements in 
the sysin has
included a password for years but has run ok until last week. Other batch jobs 
using that Id are still
running OK. Sounds like I'll need to contact IBM.

Thanks everyone for your input.


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Steve Thompson
Sent: Monday, April 15, 2013 7:59 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: NDM RACF002 Error But No Password Used

From:   Biller, Charles A (CHUCK) chuck.bil...@verizon.com
Date:   04/12/2013 05:04 PM
Subject:NDM RACF002 Error But No Password Used
Sent by:IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu



We have a protected Id working fine for years. Recently someone tried to

use a password with it in an NDM process. Ever since that event, any

attempt to use that Id in an NDM process errors out with RACF002I, The

Security Interface found the PASSWORD specified was not valid for the

USERID specified, even though no password is included. How can this be
resolved?  Thanks!

-

What Release of C:D are you using?

Did the someone specify in their process a new password?  (e.g., 
SNODEID=(USERID,PASWRD,newpassword)

What are the options specified on the STG2 exit (DMGSECUR)?

If you have  NEWPASS=NO in DMGSECUR, and they did the new password, 
contact IBM for support.

Regards,
Steve Thompson

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: NDM RACF002 Error But No Password Used

2013-04-17 Thread Walt Farrell
On Wed, 17 Apr 2013 10:54:12 -0400, Biller, Charles A (CHUCK) 
chuck.bil...@verizon.com wrote:

Release 5. User reports he's not aware of a password change attempt. The 
credentials are in a sysin
and even though the racf id is protected (no password) the ndm statements in 
the sysin has
included a password for years but has run ok until last week. Other batch jobs 
using that Id are still
running OK. Sounds like I'll need to contact IBM.

Are you sure the ID wasn't just made PROTECTED last week? Or that the password 
wasn't just added to the SYSIN?

NDM almost certainly has no idea that the ID is PROTECTED, and simply passes 
along the password. And a PROTECTED ID is never usable if someone provides a 
password.

That leaves 2 choices that I can see:
(1) The ID was not PROTECTED previiously; or
(2) The SYSIN did not have a PASSWORD specified previously. 

I do not know if NDM even allows possibility 2 (it's very rare to allow use of 
an ID without specifying the password), so I suspect that (1) applies.

-- 
Walt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: NDM RACF002 Error But No Password Used

2013-04-15 Thread Steve Thompson
From:   Biller, Charles A (CHUCK) chuck.bil...@verizon.com
Date:   04/12/2013 05:04 PM
Subject:NDM RACF002 Error But No Password Used
Sent by:IBM Mainframe Discussion List IBM-MAIN@listserv.ua.edu



We have a protected Id working fine for years. Recently someone tried to

use a password with it in an NDM process. Ever since that event, any

attempt to use that Id in an NDM process errors out with RACF002I, The

Security Interface found the PASSWORD specified was not valid for the

USERID specified, even though no password is included. How can this be
resolved?  Thanks!

-

What Release of C:D are you using?

Did the someone specify in their process a new password?  (e.g., 
SNODEID=(USERID,PASWRD,newpassword)

What are the options specified on the STG2 exit (DMGSECUR)?

If you have  NEWPASS=NO in DMGSECUR, and they did the new password, 
contact IBM for support.

Regards,
Steve Thompson

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


NDM RACF002 Error But No Password Used

2013-04-12 Thread Biller, Charles A (CHUCK)
We have a protected Id working fine for years. Recently someone tried to

use a password with it in an NDM process. Ever since that event, any

attempt to use that Id in an NDM process errors out with RACF002I, The

Security Interface found the PASSWORD specified was not valid for the

USERID specified, even though no password is included. How can this be
resolved?  Thanks!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: NDM RACF002 Error But No Password Used

2013-04-12 Thread EXT-Schwarz, Barry
What is NDM?  What product (apparently not RACF) issued the RACF002I message?  
Does RACF still show the user as protected?

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
 On Behalf Of Biller, Charles A (CHUCK)
 Sent: Friday, April 12, 2013 1:53 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: NDM RACF002 Error But No Password Used

 We have a protected Id working fine for years. Recently someone tried
 to

 use a password with it in an NDM process. Ever since that event, any

 attempt to use that Id in an NDM process errors out with RACF002I, The

 Security Interface found the PASSWORD specified was not valid for the

 USERID specified, even though no password is included. How can this be
 resolved?  Thanks!

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: NDM RACF002 Error But No Password Used

2013-04-12 Thread Lizette Koehler
According to the message - Contact Connect Direct support person at your shop.  
If you are that person, you need to see if there are other messages in SYSLOG 
or JOB Log that would help.  Otherwise, Probably contact the vendor for 
assistance.


Lizette


RACF002I
MODULE = DMGSECUR   

PASSWORD specified not valid for USERID specified.  
The Security Interface found the PASSWORD specified 
was not valid for the USERID specified. 

System Action:  The SIGNON command is rejected or the PROCESS   
is failed.  

Response:  Correct the password and/or userid and re-submit 
   the request. If the error persists contact your  
   Connect:Direct coordinator with the pertinent
   details. 


-Original Message-
From: EXT-Schwarz, Barry barry.schw...@boeing.com
Sent: Apr 12, 2013 5:00 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: NDM RACF002 Error But No Password Used

What is NDM?  What product (apparently not RACF) issued the RACF002I message?  
Does RACF still show the user as protected?

 -Original Message-
 From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
 On Behalf Of Biller, Charles A (CHUCK)
 Sent: Friday, April 12, 2013 1:53 PM
 To: IBM-MAIN@LISTSERV.UA.EDU
 Subject: NDM RACF002 Error But No Password Used

 We have a protected Id working fine for years. Recently someone tried
 to

 use a password with it in an NDM process. Ever since that event, any

 attempt to use that Id in an NDM process errors out with RACF002I, The

 Security Interface found the PASSWORD specified was not valid for the

 USERID specified, even though no password is included. How can this be
 resolved?  Thanks!


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN