Checked on http://www-03.ibm.com/systems/z/os/zos/bkserv/lookat/

LOOKAT z/OS 1.9 :
Explanation: A user attempted to retrieve a digital certificate using
the R_PKIServ callable service function EXPORT, but is not authorized to
do so. 

LOOKAT z/OS 1.8 :
Explanation: This message is issued when RACF detects an unauthorized
request (a violation) made by a user or job. The user and group
indicated in the first line of the ICH408I message are the execution
user ID and group ID under which the job was to run. 

LOOKAT z/OS 1.7 :
Explanation: A user attempted to retrieve a digital certificate using
the R_PKIServ callable service function EXPORT, but is not authorized to
do so. 

LOKAT z/OS 1.6 :
Explanation: This message is issued when RACF detects an unauthorized
request (a violation) made by a user or job. The user and group
indicated in the first line of the ICH408I message are the execution
user ID and group ID under which the job was to run. 

Eh... Time to leave the odd z/OS levels and move to an even z/OS level?



-- 
Maarten Slegtenhorst

-----Oorspronkelijk bericht-----
Van: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] Namens
Paul [EMAIL PROTECTED]
Verzonden: woensdag 9 juli 2008 14:41
Aan: [email protected]
Onderwerp: LOOKAT ICH408I

Just for instructional purposes, I wrote a job step using an undefined
HLQ that failed with:

 ICH408I ...
   INSUFFICIENT ACCESS AUTHORITY
   FROM CATALOG.**.MASTER (G)

.. and tried LOOKAT ICH408I.

I get:

#1.4.48 "z/OS V1R7.0 Security Server RACF Messages and Codes"
     ___________________________________________________________________

        1.4.48 ICH408I
 
________________________________________________________________________
____

   ICH408I NOT AUTHORIZED TO EXPORT DIGITAL CERTIFICATES

   Explanation: A user attempted to retrieve a digital certificate using
the R_PKIServ
   callable service function EXPORT, but is not authorized to do so.

I consider this way wide of the mark.  (Same at V1R9.0.)

PMR?  RCF?  Feedback?  Other (specify)?

-- gil
-----------------------------------------------------------------
ATTENTION:
The information in this electronic mail message is private and
confidential, and only intended for the addressee. Should you
receive this message by mistake, you are hereby notified that
any disclosure, reproduction, distribution or use of this
message is strictly prohibited. Please inform the sender by
reply transmission and delete the message without copying or
opening it.

Messages and attachments are scanned for all viruses known.
If this message contains password-protected attachments, the
files have NOT been scanned for viruses by the ING mail domain.
Always scan attachments before opening them.
-----------------------------------------------------------------

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to