Peter,

This fixed that problem for us at z/OS 1.7:

MSG(7003,SBATCH)                 * SUPPRESS MESSAGE TSS7003 (PASSWORD
*                                * EXPIRATION MESSAGE REMINDER) WHEN
*                                * SUBMITTING A BATCH JOB.
*                                * 08/31/2006

in TSSPARM.

Bob

IBM Mainframe Discussion List <[email protected]> wrote on 08/30/2007
11:54:19 AM:

> > -----Original Message-----
> > From: Walt Farrell [mailto:[EMAIL PROTECTED]
> > Sent: Thursday, August 30, 2007 11:16 AM
> > To: [email protected]
> > Subject: Re: Password expiration message at every SUBMIT at z/OS 1.8?
> >
> > Prior to z/OS R8, the RACROUTE REQUEST=VERIFYX that JES issues to
> > "authenticate" the job as it's read in occurred in the JES address
space.
> >
> > Effective with z/OS R8 that processing now happens in the submitter's
> > address space, which can result in messages coming out on a TSO session
> > that used to only come out in the job log, if the security product
> > recognizes that it was called from a TSO session and decides to issue a
> > TPUT or WTO with route code 11.
> >
> > I think this might also occur in RACF, unless we've fixed it.  We did
fix
> > one such case, but might have others that remain.
> >
> > This is something you'll need to address with the CA support folks, but
> > this should at least get you/them started down the right path.
>
> Thanks Walt.  CA support did already return a prompt response to our
> security staff indicating the same root cause you have described.  There
is
> a TSS suppression option, but I have requested our security team to check
if
> that suppresses the message at all times or just at SUBMIT time.  We
would
> not want the message suppressed at all times, just at SUBMIT time, so if
the
> option is "always suppress" we will just have to live with the changed
> behavior for now.
>
> Thanks again for your help.
>
> Peter

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to