Re: RACF - ICH3031 ICH304D Messages

2010-05-13 Thread Walt Farrell
On Wed, 12 May 2010 19:19:12 -0500, Lenz, Joseph joseph.l...@ttiinc.com wrote: Is there a way to keep RACF from preventing signons to my z/OS 1.10 system when RACF message ICH304D has been issued? I would prefer the system just revoke the user without the need for operator intervention. A user

Re: RACF - ICH3031 ICH304D Messages

2010-05-13 Thread Shane Ginnane
On Thu, May 13th, 2010 at 10:14 PM, Walt Farrell wrote: You could automate a response to that message. However, this gives you only two possibilities: (1) Risk all your SPECIAL IDs becoming revoked if your automation responds that RACF should not grant another chance; or (2) Allow unlimited

Re: RACF - ICH3031 ICH304D Messages

2010-05-13 Thread Tony @ Comcast
List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Walt Farrell Sent: Thursday, May 13, 2010 7:15 AM To: IBM-MAIN@bama.ua.edu Subject: Re: RACF - ICH3031 ICH304D Messages On Wed, 12 May 2010 19:19:12 -0500, Lenz, Joseph joseph.l...@ttiinc.com wrote: Is there a way to keep RACF from preventing

RACF - ICH3031 ICH304D Messages

2010-05-12 Thread Lenz, Joseph
Is there a way to keep RACF from preventing signons to my z/OS 1.10 system when RACF message ICH304D has been issued? I would prefer the system just revoke the user without the need for operator intervention. A user who is not 'SPECIAL' simply gets revoked. Users who are 'SPECIAL' cause the

Re: RACF - ICH3031 ICH304D Messages

2010-05-12 Thread Lizette Koehler
I would think that could be handled better by either mpf list or automation (Netview, OPS/MVS, AF Oper). Lizette Lenz, Joseph Wrote: Is there a way to keep RACF from preventing signons to my z/OS 1.10 system when RACF message ICH304D has been issued? I would prefer the system just revoke