Vivian wrote:
On May 22, 2:31 pm, [email protected] wrote:
When we run in straight batch PGM=MyPgm, it works.
When we run using IKJEFT01 with a call, it works.
When we run it as a DB2 job (IKJEFT01 with Run), it fails S047.  But,
all of our DB2 libs are also APF authorized and in the linklist.  By
all I mean SDSNLINK, SDSNEXIT, SDSNLOAD, SDXRRESL.  So, I'm
perplexed.
Is DSN in your TSO Authorized commands table?

Yes, it is.  We put it in the authorized commands and the authorized
programs, just in case...  No change.

Might try establishing DB2 connectivity by having your program call DB2 CAF (Call Attachment Facility) from your program rather than using DB2 DSN interface under batch TSO. That way you can again invoke your program directly from JCL and at least get the added complication of IKJEFT01 batch TSO and DB2 DSN out of the picture. If you need a different DB2 subsystem for testing, you can still have that passed to your program as a parameter to control the CAF call. Can't recall ever using CAF from an authorized program, but at least there shouldn't be any confusion about getting your program invoked as authorized and running as authorized up to the actual CAF call.

Converting batch DB2 to use CAF instead of the DSN interface has the added benefit that SMF job step stats will now reflect the "real" executed program and not be disguised as just another execution of IKJEFT01.
   JC Ewing

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to