Rex, Found the following on the IBM support site. Maybe something in there explains and/or helps. Regards, Peggy
"Problem Users in the Unix (OMVS) environment that are not superusers (UID is other than 0) cannot perform ping (oping) or traceroute (otracert). Cause Ping receives the following error: EZZ3115I Unable to open RAW socket: EDC5139I Operation not permitted. Traceroute receives the following error: EZZ6354I otracert: Recv socket() error detected (139/743C00B0) Other commands requiring APF authorization might also fail. Superusers (UID(0)) can use these commands without any errors. It is also possible that only some of the normal users experience problems while most others can use these commands without error. Review the following checklist (which is part of a normal installation) to aid in problem resolution: Ensure that all attributes normally associated with a program having APF authorization are set correctly. Confirm that SEZALINK (or SEZALOAD for V1R4 and higher), LINKLIB and SCEERUN data sets are listed in the PROGxx PARMLIB member. Confirm that the sticky (t) bit is set for the command names in the /usr/lpp/tcpip/bin directory. If these are correct, especially if some non-superusers can use these commands, check for the existence of the environment variable _BPX_PTRACE_ATTACH. If _BPX_PTRACE_ATTACH=YES for that user, or if it is defined to be set for all users, this causes programs to lose their APF authorization, which in turn causes services that require APF authorization to fail. Superusers are unaffected when using these commands, because privileged TCP/IP operations are allowed with or without APF authorization. Solution Change the setting of the _BPX_PTRACE_ATTACH environment variable to NO, or remove it from the list initialized for the user(s). If this user needs the functions associated with this setting, then include it in a command procedure (REXX exec)to be used when that function is needed in a session and inform them that they will lose the ability to perform PING and TRACRTE commands (and probably some others as well) while this is in effect." ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
