We have a special RACF group, named "SYSBATCH" and when defining a user, we
give a permit to the user's VMBATCH profile to this group. Example:
ADDUSER KRIS PASSWORD(WATER) DFLTGRP(SYSPROG) OWNER(SYSPROG)
NAME('KRIS BUELENS SE IBM, ALIAS "LE PAPE DU VM"')
RDEFINE VMBATCH KRIS OWNER(KRIS) UACC(NONE)
PERMIT KRIS CLASS(VMBATCH) ACCESS(CONTROL) ID(SYSBATCH)
Then, each server that needs to work an alternate userid (like batch worker
machines), is connected to our SYSBATCH group. Hence:
CONNECT FTPSERVE GROUP(SYSBATCH)
CONNECT BATCH001 GROUP(SYSBATCH)
CONNECT BATCH002 GROUP(SYSBATCH)
CONNECT BATCH003 GROUP(SYSBATCH) ....
2007/9/5, Troy A Slaughter <[EMAIL PROTECTED]>:
>
>
> I'm done with my second level install of z/VM 5.3, with the exception of
> FTPSERVE. I'm trying to get FTPSERVE to use RACF to manage the security
> piece. It's setup OK in the DTCPARMS file as best I can tell. I've
> additionally given FTPSERVE access of the FACILITY class...that fixed one
> of the FTP/RACF issues. I'm still getting the following error for class
> VMBATCH while trying to FTP from a Windows machine.
>
> *ICH408I USER(FTPSERVE) GROUP(SYS1 ) NAME(####################)*
> * MAINT CL(VMBATCH )*
> * INSUFFICIENT ACCESS AUTHORITY*
> * ACCESS INTENT(CONTROL) ACCESS ALLOWED(NONE )*
>
> I'm in but I have no access to any of maint's minidisks:
>
> *230 Permission denied to LINK to MAINT 191*
>
> I've tried giving FTPSERVE access to class VMBATCH, but that isn't doing
> the trick.
>
> Any help would be appreciated.
>
> I thought I was doing pretty good for my first attempt at installing the
> z/VM operating system until now.
>
> CONFIDENTIALITY NOTICE: This communication is confidential, may be
> privileged and is meant only for the intended recipient. If you are not the
> intended recipient, please notify the sender ASAP and delete this message
> from your system.
--
Kris Buelens,
IBM Belgium, VM customer support
