Health Checker and RACF

2006-11-15 Thread Mark Pace
I'm confused about RACF and Health Checker.  I've started Health Checker
and want to view it in SDSF CK.  But

 ICH408I USER(IBMUSER ) GROUP(AOPADMIN) NAME()
   HZS.ZOS1.IBMCNZ.CNZ_AMRF_EVENTUAL_ACTION_MSGS.MESSAGES
   CL(XFACILIT)
   PROFILE NOT FOUND - REQUIRED FOR AUTHORITY CHECKING
   ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )
 ***

But in RACF I have -
CLASS  NAME
-  
XFACILIT   HZS.*.*.MESSAGES (G)

GROUP CLASS NAME
- - 
GXFACILI

LEVEL  OWNER  UNIVERSAL ACCESS  YOUR ACCESS  WARNING
-       ---  ---
 00IBMUSER READ   READNO

Looks like I have it set that anyone can read the messages file.
Do I have a glaring mistake?



Mark D Pace
Senior Systems Engineer
Mainline Information Systems
1700 Summit Lake Drive
Tallahassee, FL. 32317
Office: 850.219.5184
Fax: 888.221.9862
http://www.mainline.com


This e-mail and files transmitted with it are confidential, and are
intended solely for the use of the individual or entity to whom this e-mail
is addressed.  If you are not the intended recipient, or the employee or
agent responsible to deliver it to the intended recipient, you are hereby
notified that any dissemination, distribution or copying of this
communication is strictly prohibited.  If you are not one of the named
recipient(s) or otherwise have reason to believe that you received this
message in error, please immediately notify sender by e-mail, and destroy
the original message.  Thank You.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Health Checker and RACF

2006-11-15 Thread Alvaro Quintupray
 
I suspect that must be ..

HZS.*.*.*.MESSAGES

Or

HZS.**.MESSAGES


Saludos.
Alvaro.

-Mensaje original-
De: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] En nombre de
Mark Pace
Enviado el: MiƩrcoles, 15 de Noviembre de 2006 11:08
Para: IBM-MAIN@BAMA.UA.EDU
Asunto: Health Checker and RACF

I'm confused about RACF and Health Checker.  I've started Health Checker and
want to view it in SDSF CK.  But

 ICH408I USER(IBMUSER ) GROUP(AOPADMIN) NAME()
   HZS.ZOS1.IBMCNZ.CNZ_AMRF_EVENTUAL_ACTION_MSGS.MESSAGES
   CL(XFACILIT)
   PROFILE NOT FOUND - REQUIRED FOR AUTHORITY CHECKING
   ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )
 ***

But in RACF I have -
CLASS  NAME
-  
XFACILIT   HZS.*.*.MESSAGES (G)

GROUP CLASS NAME
- - 
GXFACILI

LEVEL  OWNER  UNIVERSAL ACCESS  YOUR ACCESS  WARNING
-       ---  ---
 00IBMUSER READ   READNO

Looks like I have it set that anyone can read the messages file.
Do I have a glaring mistake?



Mark D Pace
Senior Systems Engineer
Mainline Information Systems
1700 Summit Lake Drive
Tallahassee, FL. 32317
Office: 850.219.5184
Fax: 888.221.9862
http://www.mainline.com


This e-mail and files transmitted with it are confidential, and are intended
solely for the use of the individual or entity to whom this e-mail is
addressed.  If you are not the intended recipient, or the employee or agent
responsible to deliver it to the intended recipient, you are hereby notified
that any dissemination, distribution or copying of this communication is
strictly prohibited.  If you are not one of the named
recipient(s) or otherwise have reason to believe that you received this
message in error, please immediately notify sender by e-mail, and destroy
the original message.  Thank You.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Health Checker and RACF

2006-11-15 Thread Mark Pace
HZS.*.*.*.MESSAGES

DOH!
Pesky extra dots.

Thank you.



Mark D Pace
Senior Systems Engineer
Mainline Information Systems
1700 Summit Lake Drive
Tallahassee, FL. 32317
Office: 850.219.5184
Fax: 888.221.9862
http://www.mainline.com


This e-mail and files transmitted with it are confidential, and are
intended solely for the use of the individual or entity to whom this e-mail
is addressed.  If you are not the intended recipient, or the employee or
agent responsible to deliver it to the intended recipient, you are hereby
notified that any dissemination, distribution or copying of this
communication is strictly prohibited.  If you are not one of the named
recipient(s) or otherwise have reason to believe that you received this
message in error, please immediately notify sender by e-mail, and destroy
the original message.  Thank You.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Health Checker and RACF

2006-11-15 Thread Thomas H Puddicombe
There's 4 dots in the resource name 
HZS.ZOS1.IBMCNZ.CNZ_AMRF_EVENTUAL_ACTION_MSGS.MESSAGES and only 3 dots in 
the RACF profile name HZS.*.*.MESSAGES

Mayhap the RACF profile should look like HZS.*.*.*.MESSAGES or 
HZS.**.MESSAGES or somesuch?



This is a PRIVATE message. If you are not the intended recipient, please 
delete without copying and kindly advise us by e-mail of the mistake in 
delivery. NOTE: Regardless of content, this e-mail shall not operate to 
bind CSC to any order or other contract unless pursuant to explicit 
written agreement or government initiative expressly permitting the use of 
e-mail for such purpose.





Mark Pace [EMAIL PROTECTED] 
Sent by: IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU
11/15/2006 10:08 AM
Please respond to
IBM Mainframe Discussion List IBM-MAIN@BAMA.UA.EDU


To
IBM-MAIN@BAMA.UA.EDU
cc

Subject
Health Checker and RACF






I'm confused about RACF and Health Checker.  I've started Health Checker
and want to view it in SDSF CK.  But

 ICH408I USER(IBMUSER ) GROUP(AOPADMIN) NAME()
   HZS.ZOS1.IBMCNZ.CNZ_AMRF_EVENTUAL_ACTION_MSGS.MESSAGES
   CL(XFACILIT)
   PROFILE NOT FOUND - REQUIRED FOR AUTHORITY CHECKING
   ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )
 ***

But in RACF I have -
CLASS  NAME
-  
XFACILIT   HZS.*.*.MESSAGES (G)

GROUP CLASS NAME
- - 
GXFACILI

LEVEL  OWNER  UNIVERSAL ACCESS  YOUR ACCESS  WARNING
-       ---  ---
 00IBMUSER READ   READNO

Looks like I have it set that anyone can read the messages file.
Do I have a glaring mistake?



Mark D Pace
Senior Systems Engineer
Mainline Information Systems
1700 Summit Lake Drive
Tallahassee, FL. 32317
Office: 850.219.5184
Fax: 888.221.9862
http://www.mainline.com




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Health Checker and RACF

2006-11-15 Thread Ed Finnell
 
In a message dated 11/15/2006 9:33:52 A.M. Central Standard Time,  
[EMAIL PROTECTED] writes:

Mayhap  the RACF profile should look like HZS.*.*.*.MESSAGES or 
HZS.**.MESSAGES or  somesuch?




What is it? You can ask for DSNs covered in viewing a GENERIC, probably  
doesn't do much good here what we need is a query. HZS not covered in  
profile???  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: Health Checker and RACF

2006-11-15 Thread Walt Farrell

On 11/15/2006 10:08 AM, [EMAIL PROTECTED] wrote:

I'm confused about RACF and Health Checker.  I've started Health Checker
and want to view it in SDSF CK.  But

 ICH408I USER(IBMUSER ) GROUP(AOPADMIN) NAME()
   HZS.ZOS1.IBMCNZ.CNZ_AMRF_EVENTUAL_ACTION_MSGS.MESSAGES
   CL(XFACILIT)
   PROFILE NOT FOUND - REQUIRED FOR AUTHORITY CHECKING
   ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )
 ***

But in RACF I have -
CLASS  NAME
-  
XFACILIT   HZS.*.*.MESSAGES (G)


That profile covers names with 4 qualifiers.  From the message, the 
resource name has 5 qualifiers.


Walt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html