On 11/29/2006 2:12 PM, Strudwick, Martin wrote:
I am in the midst of installing z/OS V1.7 and having troubles
with the IXGLOGR task. The following messages are issued when starting
CICS T/S V3.1. Similar messages are issued when IPL'ing while logger
functions are starting and as you can see I have set the definition for
IXGLOGR.** from FAIL to WARN:
IEF196I ICH408I JOB(IXGLOGR ) STEP(IXGLOGR )
IEF196I IXGLOGR.SYSPLEX.OPERLOG.A0000000 CL(DATASET ) VOL(Z17997)
IEF196I WARNING: INSUFFICIENT AUTHORITY - TEMPORARY ACCESS ALLOWED
IEF196I FROM IXGLOGR.** (G)
IEF196I ACCESS INTENT(UPDATE ) ACCESS ALLOWED(READ )
ICH408I JOB(IXGLOGR ) STEP(IXGLOGR ) 192
IXGLOGR.SYSPLEX.OPERLOG.A0000000 CL(DATASET ) VOL(Z17997)
WARNING: INSUFFICIENT AUTHORITY - TEMPORARY ACCESS ALLOWED
FROM IXGLOGR.** (G)
ACCESS INTENT(UPDATE ) ACCESS ALLOWED(READ )
I attempted to add the user IXGLOGR with the following command:
adduser IXGLOGR dfltgrp(STCGRP) nopassword nooidcard
But received the message:
ICH51002I NAME TO BE ADDED TO RACF DATA SET ALREADY EXISTS
ICH01010I IXGLOGR NOT ADDED.
When I attempt to display user IXGLOGR I get:
ICH30001I UNABLE TO LOCATE USER ENTRY IXGLOGR
That would indicate that you have a group named IXGLOGR, rather than a
user. You can not have both.
Failure messages point to RACF not containing a valid ACEE containing
user, group or name.
Yes, but it's not clear which address space. Since this happened when
you started CICS, it is possible that your problem is that CICS is not
running with a RACF identity. Or it is possible that IXGLOGR does not
have an identity. With the information so far you can not tell which
has occurred.
As well as the started task not defined in the
RACF started procedures table.
How can I check the RACF started proc table?
It is either in the ICHRIN03 load module that you installed, or in the
STARTED class.
Why the conflicting
information on user IXGLOGR?
Explained above: it can not be both a group and a user, and you probably
have a group defined. That -may- be OK, if your started proc table
specifies that IXGLOGR runs with a different user ID than IXGLOGR, but
is likely a problem.
Walt Farrell, CISSP
z/OS Security Design, IBM
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
