----- Original Message -----
From: "Cebell, David" <[email protected]>
Newsgroups: bit.listserv.ibm-main
Sent: Tuesday, December 16, 2008 3:05 PM
Subject: Re: SDSF Security
Good suggestions on the trace.
Could one just put RACF in warn mode, try the command and determine what
is causing the command to fail.
David,
Interesting question! My take is that the high number of classes checked by
SDSF (OPERCMDS, FACILITY, WRITER, JESSPOOL, etc.) make a WARN mode
problematic (I assume you're talking warn mode at the CLASS level and not
NOPROTECTALL). Also, I believe SDSF would still suppress the ICH408I
messages even in warn mode. You would get the warn mode records cut to SMF,
but that's a big PITA and a delay compared to the SDSF security trace.
My $.02,
Tom Conley
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
