Checked on http://www-03.ibm.com/systems/z/os/zos/bkserv/lookat/
LOOKAT z/OS 1.9 : Explanation: A user attempted to retrieve a digital certificate using the R_PKIServ callable service function EXPORT, but is not authorized to do so. LOOKAT z/OS 1.8 : Explanation: This message is issued when RACF detects an unauthorized request (a violation) made by a user or job. The user and group indicated in the first line of the ICH408I message are the execution user ID and group ID under which the job was to run. LOOKAT z/OS 1.7 : Explanation: A user attempted to retrieve a digital certificate using the R_PKIServ callable service function EXPORT, but is not authorized to do so. LOKAT z/OS 1.6 : Explanation: This message is issued when RACF detects an unauthorized request (a violation) made by a user or job. The user and group indicated in the first line of the ICH408I message are the execution user ID and group ID under which the job was to run. Eh... Time to leave the odd z/OS levels and move to an even z/OS level? -- Maarten Slegtenhorst -----Oorspronkelijk bericht----- Van: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] Namens Paul [EMAIL PROTECTED] Verzonden: woensdag 9 juli 2008 14:41 Aan: [email protected] Onderwerp: LOOKAT ICH408I Just for instructional purposes, I wrote a job step using an undefined HLQ that failed with: ICH408I ... INSUFFICIENT ACCESS AUTHORITY FROM CATALOG.**.MASTER (G) .. and tried LOOKAT ICH408I. I get: #1.4.48 "z/OS V1R7.0 Security Server RACF Messages and Codes" ___________________________________________________________________ 1.4.48 ICH408I ________________________________________________________________________ ____ ICH408I NOT AUTHORIZED TO EXPORT DIGITAL CERTIFICATES Explanation: A user attempted to retrieve a digital certificate using the R_PKIServ callable service function EXPORT, but is not authorized to do so. I consider this way wide of the mark. (Same at V1R9.0.) PMR? RCF? Feedback? Other (specify)? -- gil ----------------------------------------------------------------- ATTENTION: The information in this electronic mail message is private and confidential, and only intended for the addressee. Should you receive this message by mistake, you are hereby notified that any disclosure, reproduction, distribution or use of this message is strictly prohibited. Please inform the sender by reply transmission and delete the message without copying or opening it. Messages and attachments are scanned for all viruses known. If this message contains password-protected attachments, the files have NOT been scanned for viruses by the ING mail domain. Always scan attachments before opening them. ----------------------------------------------------------------- ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html

