The problem ended up being that ICSF was not available on the Lpar we were testing (go Info. Sec.) - this appears to have caused the CHIN to go hunting for these directories in USS to resolve the keyring. Naturally, the CHIN didn't have the proper security rules in place for these "non-existent" dirs, hence the "ACCESS DENIED" error messages.
Thanks for all that responded...I mean...read my question. ;-)
Mike Davidson
TSYS MQ Tech Support
[EMAIL PROTECTED]
| Mike Davidson <[EMAIL PROTECTED]>
Sent by: MQSeries List <[EMAIL PROTECTED]> 03/29/2004 03:10 PM Please respond to MQSeries List
|
To: [EMAIL PROTECTED] cc: Subject: MQ and SSL on z/OS |
We are testing SSL with MQ v5.3 (put-level 0309) on z/OS 1.4 and the CHIN is spitting out some ACF2 security violations on a couple of USS directories that he appears to be trying to access (see error messages below):
CAS2312E CSQ2CHIN - ALTER ACCESS DENIED
/csq2chin$rdb
CAS2312E CSQ2CHIN - ALTER ACCESS DENIED
/TEMPRACF$csq2chin$1$694308864$0$0
The dirs mentioned don't even currently exist - Does anyone know where they're supposed to be?...where they need to be created? I checked the manuals (and Morag's document) and find no mention of any such dirs.
I've opened a PMR with IBM and haven't gotten alot of insight so far.
Thanks in advance!
Mike Davidson
TSYS MQ Tech Support
[EMAIL PROTECTED]
The information contained in this communication (including any attachments hereto) is confidential and is intended solely for the personal and confidential use of the individual or entity to whom it is addressed. The information may also constitute a legally privileged confidential communication. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this communication in error and that any review, dissemination, copying, or unauthorized use of this information, or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail, and delete the original message. Thank you
The information contained in this communication (including any attachments hereto) is confidential and is intended solely for the personal and confidential use of the individual or entity to whom it is addressed. The information may also constitute a legally privileged confidential communication. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this communication in error and that any review, dissemination, copying, or unauthorized use of this information, or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail, and delete the original message. Thank you
