----- Original Message -----
From: "John Eells" <[EMAIL PROTECTED]>
Newsgroups: bit.listserv.ibm-main
Sent: Wednesday, August 10, 2005 9:40 AM
Subject: Re: Any way to get SDSF to cough up ICH408I?
Thomas Conley wrote:
<snip>
Sorry if I missed it earlier in the thread, but...there's nothing (i.e.,
no ICH408I message) in SYSLOG?
Zip, zero, nada.
(Nit: Of course, SDSF does not issue of ICH408I, RACF does. However, a
caller can control the whether messages are issued; see the doc for
RACROUTE REQUEST=AUTH for the gory details. This could become important
to you later...or not.)
Tell the SDSF developers that.
From a TSO/E message standpoint, I think SDSF and RACF are acting
properly, at least for the first case you describe. That's the entire
intent of WTPMSG/NOWTPMSG, and how it's worked for at least 25 years. If
I could go back in time and had the power to do so, I'd probably choose to
make the defaults WTPMSG and MSGID, but it seems far too late to do that
now. (Can you imagine the help desk calls from people who didn't
understand all the "new" messages? *-Shiver-*)
Fine, but to diagnose SDSF I have to get thousands of TSO users to turn on
WTPMSG? Come on.
For the second case, my personal opinion (which, when combined with a
dollar, won't even get you coffee at Starbucks these days) is that there
should be a way to diagnose the second problem from either messages issued
to the user or messages recorded in SYSLOG without having to resort to SMF
records and such.
Ennnnhhhhh, thank you for playing. There are no messages issued at all.
The latest thinking is that the SDSF server itself is actually the address
space getting the ICH408I and eating it before passing NOT AUTHORIZED FOR
CMD back to the user. That's probably why the SAFTRACE came up empty.
Stupid us, we ran it specifying the user as the jobname. What were we
thinking? We're trying to set up another test specifying SDSF as the
jobname, but we have to load our new converted RACF database first. Stay
tuned for further updates.
Regards,
Tom Conley
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
