Thanks Alan, I solved it this way… made the web server id an admin of the sfs pool, DMSGETWU, use other CSL routines to check the user auth, pass the work unit number to >SFS and finally DMSRETWU when I’m done.
If I don’t do my own auth checking I assume >SFS stage will get an error. But the error and reason code won’t be exposed, preventing me from responding with suitable detail. On Thu, Dec 14, 2023 at 21:49 Alan Altmark <[email protected]> wrote: > When you CD to an SFS directory, the FTP server obtains a workunit > (DMSGETWU). Then, with each subsequent FTP operation you perform, it > pushes your workunit onto the stack via DMSPUSWU, does what you ask, then > pops it back off with DMSPOPWU. > > Some things it does via command and some things it does via CSL routine. > The CSL routines are always provided the workunit id. The FTP server does > not do any authorization checking. The SFS server does that based on the > ID associated with the workunit. > > In any case, if you're going to depend on the alternate userid, you have > to set it before you do ANY SFS functions. If QUERY IUCV shows you already > have a connection to the SFS server, you need to purge the workunits or > re-IPL CMS. If you use the admin workunit functions of SFS, you can avoid > worrying about when, exactly, and APPC connection is established. (APPC is > an IUCV-like connection, but it has different semantics.) > > Alan > > Alan Altmark > IBM Senior z/VM Engineer and Consultant > 1 607 321 7556 (Mobile) > [email protected] > > > -----Original Message----- > > From: CMSTSO Pipelines Discussion List <[email protected]> > > On Behalf Of Rob van der Heij > > Sent: Thursday, December 14, 2023 4:30 AM > > To: [email protected] > > Subject: [EXTERNAL] Re: [CMS-PIPELINES] >SFS ERROR 1180 > > > > On Thu, 14 Dec 2023 at 08:45, Kris Buelens <[email protected]> > wrote: > > > > > I have some relatively vague memories that someone with SFS admin > > > rights could connect to SFS using different authorities concurrently. > > > Thinking a bit deeper: the FTP server uses this during an FTP PUT or > > > GET with SFS. I don't think it uses Diag D4 to start talking to SFS. > > > > > > > Correct. You must enroll FTPSERVE as ADMIN to FTP to SFS directories. I > > believe it's just restraining itself and checking SFS grants to restrict > the user. > > > > Rob >
