Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-14 Thread Donald Russell
ark > IBM Senior z/VM Engineer and Consultant > 1 607 321 7556 (Mobile) > alan_altm...@us.ibm.com > > > -Original Message- > > From: CMSTSO Pipelines Discussion List > > On Behalf Of Rob van der Heij > > Sent: Thursday, December 14, 2023 4:30 AM > &g

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-14 Thread Alan Altmark
cember 14, 2023 4:30 AM > To: CMS-PIPELINES@VM.MARIST.EDU > Subject: [EXTERNAL] Re: [CMS-PIPELINES] >SFS ERROR 1180 > > On Thu, 14 Dec 2023 at 08:45, Kris Buelens wrote: > > > I have some relatively vague memories that someone with SFS admin > > rights could connect

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-14 Thread Donald Russell
In our case the web server does depend on SFS. The entire document tree is sfs as well as the web server code itself. The >SFS stage accepts a work unit number…. So I looked at DMSGETWU. It clearly states the issuing id must be an SFS administrator to specify the userid to act as. S, I’m goi

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-14 Thread Kris Buelens
If the webserver does not depend on accessed SFS directories you could also consider using DMSPURWU to break all connections with SFS before you issue Diag D4, then >SFS will connect with the alternate userid, and after Diag D4 reset, issue DMSPURWU again. I'll send you my SFSDISC EXEC Kris Buelen

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-14 Thread Donald Russell
Is making the web servers sfs admins the correct solution? I can do that and “query auth” to limit access as needed. The application will still use diag d4 to influence cp link and the spool orig id when it sends files tother users. (This application links to other mdisks and I need that to be ba

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-14 Thread Rob van der Heij
On Thu, 14 Dec 2023 at 08:45, Kris Buelens wrote: > I have some relatively vague memories that someone with SFS admin rights > could connect to SFS using different authorities concurrently. > Thinking a bit deeper: the FTP server uses this during an FTP PUT or GET > with SFS. I don't think it use

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-13 Thread Kris Buelens
I have some relatively vague memories that someone with SFS admin rights could connect to SFS using different authorities concurrently. Thinking a bit deeper: the FTP server uses this during an FTP PUT or GET with SFS. I don't think it uses Diag D4 to start talking to SFS. Kris Buelens, --- V

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-13 Thread Donald Russell
Yes, I use >SFS explicitly and the directory is not currently accessed. I rely on >SFS to write to the sfs file space without it being accessed. The diag d4 is done just before the pipe command. It’s rather dynamic because the userid is running a web server application that requires authentication

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-13 Thread Rob van der Heij
On Thu, 14 Dec 2023 at 05:40, Donald Russell wrote: > > Thanks Rob, > Since >SFS uses a private work unit by default, doesn’t that mean it gets a > new work unit before connecting to the sfs server? Diag d4 is done before > the pipe command, so I’m expecting the new connection to appear to initia

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-13 Thread Donald Russell
On Wed, Dec 13, 2023 at 15:01 Rob van der Heij wrote: > On Wed, 13 Dec 2023 at 23:37, Alan Altmark > wrote: > > > If you're going to play with the userid, you need to use workunits. > Once > > your APPC connection to the SFS server is established, changing your > userid > > doesn't affect opera

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-13 Thread Donald Russell
; 1 607 321 7556 (Mobile) > alan_altm...@us.ibm.com > > > -Original Message- > > From: CMSTSO Pipelines Discussion List > > On Behalf Of Donald Russell > > Sent: Wednesday, December 13, 2023 4:13 PM > > To: CMS-PIPELINES@VM.MARIST.EDU > > Subject:

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-13 Thread Rob van der Heij
On Wed, 13 Dec 2023 at 23:37, Alan Altmark wrote: > If you're going to play with the userid, you need to use workunits. Once > your APPC connection to the SFS server is established, changing your userid > doesn't affect operations over the existing connection. Workunits create > new connection

Re: [CMS-PIPELINES] >SFS ERROR 1180

2023-12-13 Thread Alan Altmark
2023 4:13 PM > To: CMS-PIPELINES@VM.MARIST.EDU > Subject: [EXTERNAL] [CMS-PIPELINES] >SFS ERROR 1180 > > A userid has its ALTUSER set to a different id. (Diag D4)Then a pipe … | > >SFS …. > tries to write to a space the alt user is authorized for, but the stage fails > with

[CMS-PIPELINES] >SFS ERROR 1180

2023-12-13 Thread Donald Russell
A userid has its ALTUSER set to a different id. (Diag D4)Then a pipe … | >SFS …. tries to write to a space the alt user is authorized for, but the stage fails with error 1180 Not authorized. Instead of >SFS, I also tried VMLINK .DIR … ( WRITE NONAME INVOKE MODULE PIPE … | Name type .FM V oddly t