Pigpen?--I'm a pig pin? SDSF did 31 RACROUTE REQUEST=AUTHs when I entered SDSF and issued the DA, LOG and ST commands. I didn't see hundreds of RACROUTE calls as you say but I suppose if you enter SDSF commands all day then hundreds may be found.
Of the 31 RACROUTE calls, 26 specified LOG=NOSTAT so no ICH408Is if failures. Four of the 31 calls had LOG=ASIS so you would see ICH408I messages on failures. I still suggest to look at the log first before spending time with traces. As I stated in my original post, he would have found the ICH408I message showing the SDSF resource name and profile that failed for the SR command. George Fogg -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Pinnacle Sent: Tuesday, December 16, 2008 6:07 PM To: [email protected] Subject: Re: SDSF Security ----- Original Message ----- From: "George Fogg" <[email protected]> Newsgroups: bit.listserv.ibm-main Sent: Tuesday, December 16, 2008 8:16 PM Subject: Re: SDSF Security > Why all this work with SAFTRACE and SDSF trace? Why not look in the log. > If > you are using RACF and have the proper profile then you should see: > > ICH408I USER(USERA ) GROUP(HZSXXX ) NAME(TEST ID FOR G FOGG ) 987 > ISFCMD.ODSP.SR.BOST CL(SDSF ) > INSUFFICIENT ACCESS AUTHORITY > FROM ISFCMD.ODSP.SR.** (G) > ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) > George, That's a negatory Pigpen. SDSF generates hundreds of RACROUTE calls per screen, so they actively suppress about 99.99% of the ICH408I messages that would otherwise be issued. Every now and then you will get the ICH408I as you did above, but the vast majority of the time in SDSF, you won't see a thing. Regards, Tom Conley ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
