On Thu, Jun 16, 2016 at 2:15 PM, Adams, Anne (DTI) <[email protected]> wrote:
> Hey friends, this isn't necessarily a z/OS question but I'm hoping someone > knows. > > Do you have to STEPLIB all libraries for CICS, even if they're in the > LINKLIST? We're running 5.2 of CICS and z/OS 2.20. For instance, do > SCEERUN, SCEERUN2, RACF (or ACF2) have to be in the STEPLIB? I'm being told > this is because they all have to be APF authorized and you lose that with > the linklist. All the appropriate libraries are APF authorized. I supposed > I could create a little vanilla system and be certain, but I was sort of > hoping someone would know. > > ... and if the answer is yes, shame on IBM for making me do that. > No, you don't, in general, need those libraries to be in a STEPLIB for CICS. You do _not_ lose APF authorization just because a data set is in the linklist. I don't know who told you that. There is a parameter called LNKAUTH in the IEASYSnn member of PARMLIB. If it is set to LNKLIST, then _every_ library on the link list is APF authorized when used via the link list even if it is not in the APF table (STEPLIB remains dependent on APF table). Most shops any more use the APFTAB value which indicates that a data set's APF authorization is based on the APF table when a module is accessed via the link list or a STEPLIB. ref: https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.ieae200/ieae200306.htm <quote> *LNKAUTH={LNKLST}|{APFTAB}* This parameter specifies whether all libraries in the LNKLST concatenation are to be treated as APF-authorized when accessed as part of the concatenation, or whether only those libraries that are named in the APF table are to be treated as APF-authorized. *Value Range*: Not applicable *Default Value*: LNKLST, meaning that all libraries in the LNKLST concatenation are to be treated as APF-authorized when accessed as part of the concatenation. If the default for the LNKAUTH system parameter is taken, or is specified in IEASYSxx or by the operator, libraries in the LNKLST concatenation are APF-authorized when accessed as part of the LNKLST concatenation. If a LNKLST library is not listed in the APF table, referencing the library through a JOBLIB or STEPLIB DD statement causes the library to be considered unauthorized for the duration of the job or step. </quote> > > Anne R. Adams, CISSP > DTI, Systems Engineering > Sr. Mainframe Services Analyst > > -- "Pessimism is a admirable quality in an engineer. Pessimistic people check their work three times, because they're sure that something won't be right. Optimistic people check once, trust in Solis-de to keep the ship safe, then blow everyone up." "I think you're mistaking the word optimistic for inept." "They've got a similar ring to my ear." >From "Star Nomad" by Lindsay Buroker: Maranatha! <>< John McKown ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
