Hi,
Since LOOK is freeware the fix is someone who thinks it is worth keeping
alive needs to update to work properly without using user key common
storage. My strong recommendation for any commercial system do without
LOOK till someone upgrades it.
There are many alternatives that do not require compromise of z/OS
integrity.
IPCS with appropriate RACF definitions and free MXI come to mind
immediately as do the commercial z/OS monitors SYSVIEW, MAINVIEW,
OMEGAMON, TMON, MXI G2.
Setting ALLOWUSERKEYCSA(YES) is flagged by the Health Checker for z/OS
The ALLOWUSERKEYCSA DIAGxx option has been set to (YES)
Explanation: ALLOWERUSERKEYCSA(YES) has been specified in the active
DIAGxx parmlib member. IBM recommends that you specify
ALLOWUSERKEYCSA(NO) in order to prevent user key CSA from being
obtained. User key CSA creates a security risk because any
unauthorized program can modify it. However, specifying
ALLOWUSERKEYCSA(NO) may cause programs obtaining this storage to
fail.
If no one chooses to upgrade LOOK then it is old code and just needs to
die off and be abandoned.
Best Regards,
Sam Knutson, GEICO
System z Performance and Availability Management
mailto:[EMAIL PROTECTED]
(office) 301.986.3574
"Think big, act bold, start simple, grow fast..."
-----Original Message-----
IMO, this should be APAR-able or there should be a documented
work around. Did you open up a PMR with IBM or search IBMLINK?
Mark
--
Mark Zelden
Sr. Software and Systems Architect - z/OS Team Lead
Zurich North America / Farmers Insurance Group - ZFUS G-ITO
mailto:[EMAIL PROTECTED]
z/OS Systems Programming expert at
http://expertanswercenter.techtarget.com/
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html
====================
This email/fax message is for the sole use of the intended
recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution of this
email/fax is prohibited. If you are not the intended recipient, please
destroy all paper and electronic copies of the original message.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
