I am yet to get zOS 1.11 into production, however, a (dimly) remember facing this a few months ago during install. I am going from zos 1.08 to 1.11 so there was a whole bunch of SDSF related RACF commands. I did the "RACF commands converted from ISFPARMS by ISFACR " to convert to using RACF, and atter a little fiddling it works fine. I "think" you are getting a RACF effor, but JES is not showing it to you (how thoughtful of jes). Try this command: $TDEBUG,SECURITY=YES This makes it so you actually see the RACF errors being generated when SDSF tries to access the JES Spool, as I understand it. Doing this led right to how to fix the RACF access.
From: Thomas David Rivers <[email protected]> To: [email protected] Date: 01/25/2011 08:42 AM Subject: Re: SDSF Authority Change with z/OS 1.11? (ISFUSER problem) Sent by: IBM Mainframe Discussion List <[email protected]> We've got the same problem after our upgrade to z/OS 1.11 (ADCD distribution under zPDT.) Having not yet found a solution, I was really happy to see this report with the promise of more avenues to investigate. Interestingly, when I issue the TRACE command I get: COMMAND NOT AUTHORIZED So - how do you turn on TRACE to discover authority issues when you're not authorized to issue TRACE? - Thanks - - Dave Rivers - Pinnacle wrote: > > Harry, > > Use the SDSF TRACE command to activate the trace, then try your > failing operation. Use TRACE to turn off the trace, then look at the > TSO user in SDSF. There should be a trace dataset in the output, > which will show you all the security resource names that are failing. > > Regards, > Tom Conley -- [email protected] Work: (919) 676-0847 Get your mainframe programming tools at http://www.dignus.com ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
