Add ILPROC=BATCH to your ISFOPER group name parameters in ISFGRP and it should let you run batch jobs with your ISFOPER definitions for userid=P390. Dennis
-----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Rich Smrcina Sent: Tuesday, March 25, 2008 3:20 PM To: [email protected] Subject: Re: More SDSF security questions In TSO, I get this from the WHO command on the P390 user: USERID=P390,PROC=DBSPROC,TERMINAL=LCL701,GRPINDEX=2,GRPNAME=ISFOPER, MVS=z/OS 01.04.00,JES2=z/OS 1.4,SDSF=HQX7707,ISPF=5.2,RMF/DA=NOTACC, and from batch: USERID=P390,PROC=BATCH,TERMINAL=BATCH,GRPINDEX=3,GRPNAME=ISFUSER,MVS=z/O S 01.04 RMF/DA=NOTACC,SERVER=YES,SERVERNAME=SDSF,JESNAME=JES2,MEMBER=SYS1,SYSNAM E=P390, I tried a jobname of P390A and I still can only see the job that I'm running. Arthur T. wrote: > On 25 Mar 2008 06:37:16 -0700, in bit.listserv.ibm-main > (Message-ID:<[EMAIL PROTECTED]>) [EMAIL PROTECTED] (Rich > Smrcina) wrote: > >> I tried PREFIX and I get COMMAND NOT AUTHORIZED. > > You had given us the output of the WHO command in batch, but you > never showed us the output from what you hope is the same userid in > TSO. I suspect they're different. > > As I mentioned in a related thread some time ago: > > Many years back I found out that the userid used to search the SDSF > tables is *not* the RACF userid when done from batch. Instead, it's the > jobname-minus-last-character. I had opened a PMR; I forget details of > the response, but they basically said WAD. > > So, give us the WHO from batch *and* TSO. If they're different, > that explains a lot. Then try using a jobname of your userid plus one > character and try again and let us know. I never did find out if IBM > finally fixed this security problem. > > -- Rich Smrcina VM Assist, Inc. Phone: 414-491-6001 Ans Service: 360-715-2467 rich.smrcina at vmassist.com http://www.linkedin.com/in/richsmrcina Catch the WAVV! http://www.wavv.org WAVV 2008 - Chattanooga - April 18-22, 2008 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
