On 8/10/2005 3:02 PM, Thomas Conley wrote:
Thanks to Dennis Trojak and Tom Schmidt, I turned on the SDSF trace
facility for 0080 SAF events and viola! I saw an OPERCMDS call for
JES2.CANCEL.somethingorother. You may remember about 2 months ago that
we had to disable OPERCMDS in order to prevent those unsightly 483
FRACINT abends for remote commands from ACF2. So we either get abends
on remote commands or SDSF doesn't work. Heckuva choice.... Right now
we're having fun trying to figure out how to modificate the ISFUSER exit
to allow these to go through even if OPERCMDS is inactive. Do you have
any better ideas?
I'm afraid my best suggestion is that you accept that you cannot route
commands from an ACF2 system to a RACF system, revise your operational
procedures so you don't do such routing, and reenable OPERCMDS on the
RACF system.
I will, though, wish you the best of luck in your attempt to get ISFUSER
to work for you. I don't know enough about SDSF to offer any help
there, but perhaps someone else on the list with more SDSF knowledge
than I have will have some suggestions in that area.
Walt Farrell, CISSP
z/OS Security Design, IBM
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
