Hi Biyamin, That's what I was trying to avoid as i am short on free regs and my workarea overflows (I already modified the program tyo use MGCRE)... But, in case of no alternative, a man should do what a man should do and I'll use the mortified version.
ITschak ITschak Mugzach Z/OS, ISV Products and Application Security & Risk Assessments Professional On Thu, Mar 5, 2015 at 8:20 PM, Binyamin Dissen <[email protected]> wrote: > Use MGCRE to specify the user attributes. > > On Thu, 5 Mar 2015 17:29:54 +0200 Itschak Mugzach <[email protected]> > wrote: > > :>I am running a MPF exit that works fine from user adress spaces. In > respond > :>to RACF msg ICH302D, the userid assigned is +CONSOLE. The OPERCMDS > profile > :>is having uacc read, but racf refuses the REPLYxx,Y > :>Another command issued under the same conditions (no acce)is MVS SEND > :>command, this time from mstjcl00.I am trying to avoid converting to > MGCRE. > :> > :>Any Idea how to assign an active id to the exit, or CONSOLEID? > :> > :> > :>ICH408I USER(+CONSOLE) GROUP(* ) NAME(??? ) 931 > :> > :> MVS.REPLY CL(OPERCMDS) > :> > :> INSUFFICIENT ACCESS AUTHORITY > :> > :> ACCESS INTENT(READ ) ACCESS ALLOWED(NONE ) > :> > :>IEE345I REPLY AUTHORITY INVALID, FAILED BY SECURITY PRODUCT > > -- > Binyamin Dissen <[email protected]> > http://www.dissensoftware.com > > Director, Dissen Software, Bar & Grill - Israel > > > Should you use the mailblocks package and expect a response from me, > you should preauthorize the dissensoftware.com domain. > > I very rarely bother responding to challenge/response systems, > especially those from irresponsible companies. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
