Re: APF authorized, but not

It has always been the case that it is the real data set name entry in the APF list that is used for authorization, not an alias. This is documented. And the CSV_APF_EXISTS health check reports on this situation. Peter Relson z/OS Core Technology Design --

Re: APF authorized, but not

mvsguy wrote: I'm running a serverpac job to copy the RACF DSN to the target system. Naturally, SYS1.LINKLIB needs to be auth'd on the driver system.. I add the alias'd dsn to a temp PROGxx and switch to it. All looks good and "D PROG,APF " displays the alias and the correct path. However whe

APF authorized, but not

It is my impression that you shouldn't use the alias but instead specify the real DSN (SYS1.LINKLIB) and associated volume serial. Note that you will reach more IBM-Mainers if you send your Email to the listserv. See registration information below. Bill mvsguy wrote: > I'm running a serverpac jo

Re: APF-Authorized

Technology Services Iowa State University 515-294-3088 -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Aaron Walker Sent: Friday, November 16, 2007 3:56 PM To: IBM-MAIN@BAMA.UA.EDU Subject: APF-Authorized I'm posting this again. I apologize if th

APF-Authorized

CODE IS IGG0CLFT-36 ** What do I need to change where so that I can create this baby? RC56 RSN36 tells me: Explanation: The caller is not authorized. When no profile exists for functions that require RACF authorization, the caller must be at least APF authorized. What exactly do I autho

Re: APF Authorized Code/Libraries.

> -Original Message- > From: IBM Mainframe Discussion List On Behalf Of Hunkeler Peter (KIUB 34) > > >>> There are two ways: > >>OK, I can't count! > >To paraphrase: There are 11 kinds of people in the world, those who > >understand base 3, and those who don't > > 11 (base3) equals 4 (ba

Re: APF Authorized Code/Libraries.

>>> There are two ways: >>OK, I can't count! >To paraphrase: There are 11 kinds of people in the world, those who >understand base 3, and those who don't 11 (base3) equals 4 (base10), doesn't it? Maybe I just don't understand base 3. I used to know this as: "There are 10 kinds of people in the

Re: APF Authorized Code/Libraries.

In <[EMAIL PROTECTED]>, on 07/31/2006 at 10:10 AM, Edward Jaffe <[EMAIL PROTECTED]> said: >JSCBAUTH Thanks. On reflection I realized that it had to be there, because the bit is the same in SVS, which doesn't have an ASCB. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position

Re: APF Authorized Code/Libraries.

On Mon, 31 Jul 2006 12:14:16 -0300 "Shmuel Metz (Seymour J.)" <[EMAIL PROTECTED]> wrote: :>In <[EMAIL PROTECTED]>, on 07/30/2006 :> at 07:13 PM, Binyamin Dissen <[EMAIL PROTECTED]> said: :>>Actually authorization is at the jobstep task level. :>Isn't the APF status in the ASCB? ASCBAUTH, as I

Re: APF Authorized Code/Libraries.

> > >Actually authorization is at the jobstep task level. > > Isn't the APF status in the ASCB? ASCBAUTH, as I recall. > No, it is the JSCBAUTH bit in the job step control block. Hence "job step level". CC -- For IBM-MAIN su

Re: APF Authorized Code/Libraries.

Shmuel Metz (Seymour J.) wrote: Isn't the APF status in the ASCB? ASCBAUTH, as I recall. JSCBAUTH -- Edward E Jaffe Phoenix Software International, Inc 5200 W Century Blvd, Suite 800 Los Angeles, CA 90045 310-338-0400 x318 [EMAIL PROTECTED] http://www.phoenixsoftware.com/ -

Re: APF Authorized Code/Libraries.

In <[EMAIL PROTECTED]>, on 07/30/2006 at 07:13 PM, Binyamin Dissen <[EMAIL PROTECTED]> said: >Actually authorization is at the jobstep task level. Isn't the APF status in the ASCB? ASCBAUTH, as I recall. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see

Re: APF Authorized Code/Libraries.

On 7/31/2006 2:44 AM, Binyamin Dissen wrote: TSO starts a parallel TMP as a jobstep task, and runs the command under it. In my experience, and from reading the code, the parallel TMP is not a jobstep task. IKJEFT01 (or one of its relatives) is the jobstep task, and the parallel TMP is merely

Re: APF Authorized Code/Libraries.

On Sun, 30 Jul 2006 23:47:00 + "Jeffrey D. Smith" <[EMAIL PROTECTED]> wrote: :>From: "Binyamin Dissen" <[EMAIL PROTECTED]> :>Sent: 7/30/2006 10:13 AM :>To: "IBM-MAIN@BAMA.UA.EDU" :>Subject: Re: APF Authorized Code/Libraries. :>O

Re: APF Authorized Code/Libraries.

== -Original Message- From: "Binyamin Dissen" <[EMAIL PROTECTED]> Sent: 7/30/2006 10:13 AM To: "IBM-MAIN@BAMA.UA.EDU" Subject: Re: APF Authorized Code/Libraries. On Sun, 30 Jul 2006 09:08:00 -0300 "Sh

Re: APF Authorized Code/Libraries.

On Sun, 30 Jul 2006 09:08:00 -0300 "Shmuel Metz (Seymour J.)" <[EMAIL PROTECTED]> wrote: :>In <[EMAIL PROTECTED]>, on :>07/28/2006 :> at 05:16 PM, Wayne Driscoll <[EMAIL PROTECTED]> said: :>>While that is true, since non-reentrent code loaded out of

Re: APF Authorized Code/Libraries.

In <[EMAIL PROTECTED]>, on 07/28/2006 at 05:16 PM, Wayne Driscoll <[EMAIL PROTECTED]> said: >While that is true, since non-reentrent code loaded out of an APF >authorized library is loaded into KEY 8 storage, there is an >integrity exposure if said code is loaded into

Re: APF Authorized Code/Libraries.

On Fri, 28 Jul 2006 17:16:44 -0400 Wayne Driscoll <[EMAIL PROTECTED]> wrote: :>While that is true, since non-reentrent code loaded out of an APF :>authorized library is loaded into KEY 8 storage, there is an integrity :>exposure if said code is loaded into a multi-user address sp

Re: APF Authorized Code/Libraries.

In <[EMAIL PROTECTED]>, on 07/28/2006 at 03:57 PM, "Jeffrey D. Smith" <[EMAIL PROTECTED]> said: >Authorized programs should be reentrant All programs should be reentrant, but there's nothing special about authorized programs in that regard. >If the program runs as a job-step task, then it nee

Re: APF Authorized Code/Libraries.

G= or SETPROG will work. > A parameter feed to this program at start up is supposed to tell >the program to run APF authorized I might believe that there is a parameter that causes the program to use facilities that require authorization. >and I think it might have been linked edited wi

Re: APF Authorized Code/Libraries.

On 7/28/2006 5:17 PM, Wayne Driscoll wrote: While that is true, since non-reentrent code loaded out of an APF authorized library is loaded into KEY 8 storage, there is an integrity exposure if said code is loaded into a multi-user address space, since it is open to being modified (by accident or

Re: APF Authorized Code/Libraries.

While that is true, since non-reentrent code loaded out of an APF authorized library is loaded into KEY 8 storage, there is an integrity exposure if said code is loaded into a multi-user address space, since it is open to being modified (by accident or by intent) by a non-authorized program

Re: APF Authorized Code/Libraries.

> -Original Message- > From: IBM Mainframe Discussion List On Behalf Of Tim Hare > > >> There are two ways: > > >OK, I can't count! > > To paraphrase: There are 11 kinds of people in the world, > those who understand base 3, and those who don't

Re: APF Authorized Code/Libraries.

>> There are two ways: >OK, I can't count! To paraphrase: There are 11 kinds of people in the world, those who understand base 3, and those who don't Happy Friday Tim Hare Senior Systems Programmer Florida Department of Transportation (850) 414-4209 -

Re: APF Authorized Code/Libraries.

Authorized programs should be reentrant (I'd like to know the reasons for a non-reentrant authorized programs -- eek!). Why do you think so? Authorization has no relation to reentrancy. -- Bruce A. Black Senior Software Developer for FDR Innovation Data Processing 973-890-7300 personal: [EMA

Re: APF Authorized Code/Libraries.

> -Original Message- > From: IBM Mainframe Discussion List On Behalf Of Howard Rifkind > > I just installed a new program and one of the instructions > states to run the code in a particular library as APF authorized. > > I'm sort of confused about thi

Re: APF Authorized Code/Libraries.

== -Original Message- From: "Howard Rifkind" <[EMAIL PROTECTED]> Sent: 7/28/2006 9:38 AM To: "IBM-MAIN@BAMA.UA.EDU" Subject: APF Authorized Code/Libraries. I just installed a new program and one of the inst

Re: APF Authorized Code/Libraries.

> -Original Message- > From: IBM Mainframe Discussion List > [mailto:[EMAIL PROTECTED] On Behalf Of McKown, John > Sent: Friday, July 28, 2006 10:50 AM > To: IBM-MAIN@BAMA.UA.EDU > Subject: Re: APF Authorized Code/Libraries. > > > > There are two way

Re: APF Authorized Code/Libraries.

> -Original Message- > From: IBM Mainframe Discussion List > [mailto:[EMAIL PROTECTED] On Behalf Of Howard Rifkind > Sent: Friday, July 28, 2006 10:39 AM > To: IBM-MAIN@BAMA.UA.EDU > Subject: APF Authorized Code/Libraries. > > > I just installed a new program

APF Authorized Code/Libraries.

I just installed a new program and one of the instructions states to run the code in a particular library as APF authorized. I'm sort of confused about this. Is it o.k. to just add this library to the PROG00 member and then use some sort of SETSYS command to refresh PROG00?