Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-24 Thread Chris Mason
Matan why did IBM relased this function only from z/1.10 Make that Why did IBM released this function only from z/OS V1.11? Presumably you are comparing logging on from a 3270 device to TSO (z/OS) with logging on from a 3270 device to z/VM and that something that is so obviously useful in VM

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Binyamin Dissen
On Tue, 23 Feb 2010 09:54:31 +0200 ??? ??? matancohen...@gmail.com wrote: :I activated the ikjefln2 exit. :trying to reconnect was unsuccessfull because of RACF , i got the next :message : :ICH408I JOB(MSTJCL00) STEP(LLA ) MVS.VARY.NET CL(OPERCMDS) : INSUFFICIENT ACCESS AUTHORITY : ACCESS

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Bob Shannon
We had problems with IKJEFLN2 with OPERCMDS active. It required additional code, which unfortunately I can't share. I believe Gilbert St Fleur has a version for sale. z/OS 1.11 obviates the need for the exit. Bob Shannon Rocket Software

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Elardus Engelbrecht
matan cohen wrote: trying to reconnect was unsuccessfull because of RACF , i got the next message : ICH408I JOB(MSTJCL00) STEP(LLA ) MVS.VARY.NET CL(OPERCMDS) INSUFFICIENT ACCESS AUTHORITY ACCESS INTENT(UPDATE ) ACCESS ALLOWED(NONE ) should i define the lla as started task? You need

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Matan Cohen
yes , but if i will define the lla as a started task to RACF . I'm afraid this will make lla other security problems. On Tue, Feb 23, 2010 at 1:42 PM, Elardus Engelbrecht elardus.engelbre...@sita.co.za wrote: matan cohen wrote: trying to reconnect was unsuccessfull because of RACF , i got

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Elardus Engelbrecht
Matan Cohen wrote: yes , but if i will define the lla as a started task to RACF . I'm afraid this will make lla other security problems. Please provide examples or documentation of 'other security problems'. First time ever that I see LLA (IBM product, part of z/OS) and usage of LLA are a

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Matan Cohen
thanks, i'll check all of this On Tue, Feb 23, 2010 at 3:34 PM, Elardus Engelbrecht elardus.engelbre...@sita.co.za wrote: Matan Cohen wrote: yes , but if i will define the lla as a started task to RACF . I'm afraid this will make lla other security problems. Please provide examples or

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Rob Scott
: +1.617.614.2305 Email: rsc...@rs.com Web: www.rocketsoftware.com -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Matan Cohen Sent: 23 February 2010 13:40 To: IBM-MAIN@bama.ua.edu Subject: Re: TSO reconnect (ikjefln2) reject by RACF thanks, i'll

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Elardus Engelbrecht
Rob Scott wrote: Be aware that when the RACF OPERCMDS class is active, the IKJEFLN2 exit has to be modified to construct a security token to pass to the MGCRE service. AFAIK there is no way around this pre z/OS 1.11 Please, could you be very kind to provide any useful documentation(s) or links

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Rob Scott
: rsc...@rs.com Web: www.rocketsoftware.com -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Elardus Engelbrecht Sent: 23 February 2010 14:27 To: IBM-MAIN@bama.ua.edu Subject: Re: TSO reconnect (ikjefln2) reject by RACF Rob Scott wrote

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Dana Mitchell
On Tue, 23 Feb 2010 08:26:34 -0600, Elardus Engelbrecht elardus.engelbre...@sita.co.za wrote: AFAIK there is no way around this pre z/OS 1.11 Please, could you be very kind to provide any useful documentation(s) or links about this interesting tidbit? Groete / Greetings Elardus Engelbrecht

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Hayim Sokolsky
Mainframe Discussion List IBM-MAIN@bama.ua.edu To IBM-MAIN@bama.ua.edu cc Subject Re: TSO reconnect (ikjefln2) reject by RACF yes , but if i will define the lla as a started task to RACF . I'm afraid this will make lla other security problems. On Tue, Feb 23, 2010 at 1:42 PM, Elardus

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread R.S.
W dniu 2010-02-23 14:22, Matan Cohen pisze: yes , but if i will define the lla as a started task to RACF . I'm afraid this will make lla other security problems. You should have defined STARTED profile for each started task, especially system started task like LLA. Will it make problems -

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Chris Mason
Dana Thank you for bringing this function, new in V1R11, to my attention. In a sense fortunately, the title line is somewhat misleading. This looked like something new in VTAM, support for VTAM ... and so I decided I should know more about it and did my research. Well, it involves VTAM only

Re: TSO reconnect (ikjefln2) reject by RACF

2010-02-23 Thread Matan Cohen
thanks you all on your advices. why did IBM relased this function only from z/1.10 On Tue, Feb 23, 2010 at 11:03 PM, Chris Mason chrisma...@belgacom.netwrote: Dana Thank you for bringing this function, new in V1R11, to my attention. In a sense fortunately, the title line is somewhat

TSO reconnect (ikjefln2) reject by RACF

2010-02-22 Thread מתן כהן
Hi, I activated the ikjefln2 exit. trying to reconnect was unsuccessfull because of RACF , i got the next message : ICH408I JOB(MSTJCL00) STEP(LLA ) MVS.VARY.NET CL(OPERCMDS) INSUFFICIENT ACCESS AUTHORITY ACCESS INTENT(UPDATE ) ACCESS ALLOWED(NONE ) should i define the lla as started