Re: ADMIN failure using DUMP command in pgm ADRDSSU

2011-03-08 Thread Terry Sambrooks
Hi Greg,

In respect of your query:

"RUNNING CA'S TOP SECRET 5.0
I'm trying to dump all my disk to tape for a DR test and I believe I need to
use the ADMIN keyword.

Error when using the ADMIN keyword on the Dump command of pgm ADRDSSU.

PAGE 0001 5695-DF175  DFSMSDSS V1R3.0  DATA SET SERVICES 2011.066
 DUMP FULL INDD(INVOL) OUTDD(OUTVOL) ADMIN ALLDATA(*) TOL(IOER) ALLEXCP
ADR101I (R/I)-RI01 (01), TASKID 001 HAS BEEN ASSIGNED TO COMMAND 'DUMP '
ADR109I (R/I)-RI01 (01), 2011.066 15:43:57 INITIAL SCAN OF USER CONTROL S
ADR707E (R/I)-RI03 (06), NOT AUTHORIZED TO USE ADMINISTRATOR KEYWORD
ADR017E (001)-CLTSK(01), 2011.066 15:43:57 TASK NOT SCHEDULED DUE TO ERRO
ADR012I (SCH)-DSSU (01), 2011.066 15:43:57 DFSMSDSS PROCESSING COMPLETE."

The requirements for ADMIN authority are covered in the DFSMS Storage
Administration Reference (for DFSMSdfp, DFSMSdss, DFSMShsm) under the
heading DFSMSdss Storage Administrator in the DFDSS section. This lists the
applicable RACF profiles for various accesses but should be translatable to
Top Secret.

Kind Regards - Terry
 
Director
KMS-IT Limited
228 Abbeydale Road South
Dore
Sheffield
S17 3LA
UK
 
Reg : 3767263
 
Outgoing e-mails have been scanned, but it is the recipients responsibility
to ensure their anti-virus software is up to date.
 
 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: ADMIN failure using DUMP command in pgm ADRDSSU

2011-03-07 Thread Rob Schramm
Geez.. why bother having security at all.. just put yourself in MODE(WARN)
... you are almost there anyway.

But.. I will say that when it comes to the IBM products, if you don't have a
resource defined the resource check is returned with a RC(4) aka "No
Decision"  ... it is up to the individual product to decide what to do ...
sometimes it lets you do whatever you are trying to do.. other times it will
fail the request and not give you a lot of help as to the missing resource
name.

According to the ADR707E (which gives you all the info you need)

TSS PER() IBMFAC(ADMINSTRATOR)

Of course it is over 8 characters.. so you can probably get by with

TSS ADD(dept) IBMFAC(ADMINIST)
TSS PER() IBMFAC(ADMINIST) 

HTH

Rob Schramm



-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf
Of Greg Caserta
Sent: Monday, March 07, 2011 3:59 PM
To: IBM-MAIN@bama.ua.edu
Subject: ADMIN failure using DUMP command in pgm ADRDSSU

RUNNING CA'S TOP SECRET 5.0
I'm trying to dump all my disk to tape for a DR test and I believe I need to
use the ADMIN keyword.

Error when using the ADMIN keyword on the Dump command of pgm ADRDSSU.

PAGE 0001 5695-DF175  DFSMSDSS V1R3.0  DATA SET SERVICES 2011.066
 DUMP FULL INDD(INVOL) OUTDD(OUTVOL) ADMIN ALLDATA(*) TOL(IOER) ALLEXCP
ADR101I (R/I)-RI01 (01), TASKID 001 HAS BEEN ASSIGNED TO COMMAND 'DUMP '
ADR109I (R/I)-RI01 (01), 2011.066 15:43:57 INITIAL SCAN OF USER CONTROL S
ADR707E (R/I)-RI03 (06), NOT AUTHORIZED TO USE ADMINISTRATOR KEYWORD ADR017E
(001)-CLTSK(01), 2011.066 15:43:57 TASK NOT SCHEDULED DUE TO ERRO ADR012I
(SCH)-DSSU (01), 2011.066 15:43:57 DFSMSDSS PROCESSING COMPLETE.

Below is my Top Secret accesses but I can't figure out what else I need to
use the ADMIN keyword.
READY
 TSS LIST(GLC) DATA(ALL,PASSWORD)
ACCESSORID = GLC   NAME   = CASERTA, GREG
TYPE   = CENTRAL   SIZE   =  512  BYTES
FACILITY   = *ALL*
CREATED= 01/29/07  LAST MOD   = 03/07/11  14:21
PROFILES   = SYSTECP   SYSPRGP   SALARYP   SMCTECH
ATTRIBUTES = CONSOLE
BYPASSING  = NODSNCHK,NOVOLCHK,NORESCHK,NOLCFCHK,NOSUBCHK,NOVMDCHK
LAST USED  = 03/07/11 15:51 CPU(INCO) FAC(BATCH   ) COUNT(25965)
XA OTRAN   = CEMT  OWNER(SYSCOMP
   ACCESS  = ALL
INSTDATA   = TECHNICAL SUPPORT
---  SEGMENT CICS
OPIDENT= GLC
---  ADMINISTRATION AUTHORITIES
RESOURCE   = *ALL*
   ACCESS  = ALL
ACID   = *ALL*
FACILITIES = *ALL*
LIST DATA  = *ALL*,PROFILES,PASSWORD,SESSKEY
MISC1  = *ALL*
MISC2  = *ALL*
MISC8  = *ALL*
MISC9  = *ALL*
PASSWORD   =

TSS0300I  LIST FUNCTION SUCCESSFUL
READY
END


This document has been scanned by Special Metals Corporation for viruses and
inappropriate content. It contains information intended only for the
individual named. If you are not the named addressee you should not
disseminate, distribute or copy this e-mail. Please notify the sender
immediately by e-mail if you have received this e-mail by mistake and delete
this e-mail from your system. E-mail transmission cannot be guaranteed to be
secure or error-free as information could be intercepted, corrupted, lost,
destroyed, arrive late or incomplete, or contain viruses. The sender
therefore does not accept liability for any errors or omissions in the
contents of this message, which arise as a result of e-mail transmission. If
verification is required please request a hard-copy version. Special Metals
Corporation, 3200 Riverside Drive, Huntington, WV 25705, USA,
www.specialmetals.com


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


ADMIN failure using DUMP command in pgm ADRDSSU

2011-03-07 Thread Greg Caserta
RUNNING CA'S TOP SECRET 5.0
I'm trying to dump all my disk to tape for a DR test and I believe I need to 
use the ADMIN keyword.

Error when using the ADMIN keyword on the Dump command of pgm ADRDSSU.

PAGE 0001 5695-DF175  DFSMSDSS V1R3.0  DATA SET SERVICES 2011.066
 DUMP FULL INDD(INVOL) OUTDD(OUTVOL) ADMIN ALLDATA(*) TOL(IOER) ALLEXCP
ADR101I (R/I)-RI01 (01), TASKID 001 HAS BEEN ASSIGNED TO COMMAND 'DUMP '
ADR109I (R/I)-RI01 (01), 2011.066 15:43:57 INITIAL SCAN OF USER CONTROL S
ADR707E (R/I)-RI03 (06), NOT AUTHORIZED TO USE ADMINISTRATOR KEYWORD
ADR017E (001)-CLTSK(01), 2011.066 15:43:57 TASK NOT SCHEDULED DUE TO ERRO
ADR012I (SCH)-DSSU (01), 2011.066 15:43:57 DFSMSDSS PROCESSING COMPLETE.

Below is my Top Secret accesses but I can't figure out what else I need to use 
the ADMIN keyword.
READY
 TSS LIST(GLC) DATA(ALL,PASSWORD)
ACCESSORID = GLC   NAME   = CASERTA, GREG
TYPE   = CENTRAL   SIZE   =  512  BYTES
FACILITY   = *ALL*
CREATED= 01/29/07  LAST MOD   = 03/07/11  14:21
PROFILES   = SYSTECP   SYSPRGP   SALARYP   SMCTECH
ATTRIBUTES = CONSOLE
BYPASSING  = NODSNCHK,NOVOLCHK,NORESCHK,NOLCFCHK,NOSUBCHK,NOVMDCHK
LAST USED  = 03/07/11 15:51 CPU(INCO) FAC(BATCH   ) COUNT(25965)
XA OTRAN   = CEMT  OWNER(SYSCOMP
   ACCESS  = ALL
INSTDATA   = TECHNICAL SUPPORT
---  SEGMENT CICS
OPIDENT= GLC
---  ADMINISTRATION AUTHORITIES
RESOURCE   = *ALL*
   ACCESS  = ALL
ACID   = *ALL*
FACILITIES = *ALL*
LIST DATA  = *ALL*,PROFILES,PASSWORD,SESSKEY
MISC1  = *ALL*
MISC2  = *ALL*
MISC8  = *ALL*
MISC9  = *ALL*
PASSWORD   =

TSS0300I  LIST FUNCTION SUCCESSFUL
READY
END


This document has been scanned by Special Metals Corporation for viruses and 
inappropriate content. It contains information intended only for the individual 
named. If you are not the named addressee you should not disseminate, 
distribute or copy this e-mail. Please notify the sender immediately by e-mail 
if you have received this e-mail by mistake and delete this e-mail from your 
system. E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late or 
incomplete, or contain viruses. The sender therefore does not accept liability 
for any errors or omissions in the contents of this message, which arise as a 
result of e-mail transmission. If verification is required please request a 
hard-copy version. Special Metals Corporation, 3200 Riverside Drive, 
Huntington, WV 25705, USA,  www.specialmetals.com


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html