This is a test, this is only a test. I want to perform this only so I can then
be locked out from performing this. I am trying to use a Cobol program to
create a system level token (level 4). This program can successfully create
lower level tokens (levels 1, 2 and 3). I am linking with AC=1 into the
library PROD.APPL.LOADLIB. See below:
D PROG,LNKLST
CSV470I 10.15.51 LNKLST DISPLAY 120
LNKLST SET LNKLSTAP LNKAUTH=LNKLST
ENTRY APF VOLUME DSNAME
66 *SMS* PROD.APPL.LOADLIB
SAVE OPERATION SUMMARY:
MEMBER NAME PARMNTA
LOAD LIBRARY PROD.APPL.LOADLIB
PROGRAM TYPE PROGRAM OBJECT(FORMAT 2)
VOLUME SERIAL PRO108
DISPOSITION REPLACED
TIME OF SAVE 10.24.52 AUG 4, 2009
SAVE MODULE ATTRIBUTES:
AC 001
AMODE 31
COMPRESSION NONE
DC NO
EDITABLE YES
EXCEEDS 16MB NO
EXECUTABLE YES
MIGRATABLE YES
OL NO
OVLY NO
PACK,PRIME NO,NO
PAGE ALIGN NO
REFR NO
RENT NO
REUS NO
RMODE ANY
SCTR NO
SSI
SYM GENERATED NO
TEST NO
XPLINK NO
MODULE SIZE (HEX) 000038D0
DASD SIZE (HEX) 00009000
Here is my JCL to execute my job:
//FJSNTA JOB MSGCLASS=X,NOTIFY=&SYSUID
//PARMNTA EXEC PGM=PARMNTA,PARM='4 FJSTESTX'
CREATE
//
The parm specifies the token level followed by the token name. If I specify
level 3 I get a return code of 0. If I specify level 4 I get a return code
level of 16 (hex 10: 'Meaning: An unauthorized caller attempted to create a
system-level name/token pair.').
The only purpose of me doing this is to "prove" that PROD.APPL.LOADLIB is APF
authorized in this case because of LNKAUTH=LNKLST. I thought that this would
succeed, so that we could then switch to LNKAUTH=APFTAB and cause it to fail.
Is there something else I need to do to make this program authorized? Can only
assembler programs be authorized?
Thanks,
Frank
--
Frank Swarbrick
Applications Architect - Mainframe Applications Development
FirstBank Data Corporation
Lakewood, CO USA
P: 303-235-1403
F: 303-235-2075
>>>
The information contained in this electronic communication and any document
attached hereto or transmitted herewith is confidential and intended for the
exclusive use of the individual or entity named above. If the reader of this
message is not the intended recipient or the employee or agent responsible for
delivering it to the intended recipient, you are hereby notified that any
examination, use, dissemination, distribution or copying of this communication
or any part thereof is strictly prohibited. If you have received this
communication in error, please immediately notify the sender by reply e-mail
and destroy this communication. Thank you.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
