Cross-posting to both IBM-Main and RACF-L
Recently implemented OPERCMDS class security.
Now having problems with SMS doing an operator command to modify OAM in
response to an operator command to SMS and the SMS task lacking a RACF
id to present to perform the operator command it needs to do.
Operator enters:
V SMS,LIB(CPVTS05),OFFLINE
SMS responds by attempting operator command to modify OAM. That
command fails because SMS does not have a valid RACF id, and unknown
users are not allowed to MVS.MODIFY.STC.*
F OAM,V,CPVTS05,OFFLINE
IEE345I MODIFY AUTHORITY INVALID, FAILED BY SECURITY PRODUCT
ICH408I JOB(SMS ) STEP(SMS )
MVS.MODIFY.STC.OAM.OAM CL(OPERCMDS)
INSUFFICIENT ACCESS AUTHORITY
FROM MVS.MODIFY.STC.* (G)
ACCESS INTENT(UPDATE ) ACCESS ALLOWED(NONE )
CBR1920I VARY NOT SCHEDULED. COMMAND SCHEDULING ERROR.
Thus I am looking for DFSMS documentation on how we are supposed to have
SMS implemented such that it gets a RACF id assigned to it when it is
started.
My current plan is to get the SMS id defined along with a STARTED class
profile and IPL a test system, but IPL's of even test systems are not
easy to come by. Also I do not know for sure that defining the id and
the STARTED class profile will be enough for the SMS subsystem to get a
valid RACF id. Is SMS required to be defined in ICHRIN03 for it to get
a RACF id assigned?
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
