Re: SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

2011-11-10 Thread Dr. Stephen Fedtke
thanks to the captain!

it was missing JCL auth in TSOAUTH.

best
stephen

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

2011-11-10 Thread Shmuel Metz (Seymour J.)
In 9741969858283522.wa.wfarrellus.ibm@bama.ua.edu, on 11/09/2011
   at 05:15 PM, Walt Farrell wfarr...@us.ibm.com said:

Wouldn't help in this case, I'm afraid. The relevant TSO/E message
gives two dynamic allocation error return codes that are relevant,
but both of them just say talk to your RACF admininstrator. And
given the design of the TSO processing for this there are no ICH
messages.

Ouch! I hate message manuals that tell the reader to talk to himself.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

2011-11-10 Thread Ed Gould
 Shmuel,
Like the message. That said contact your systems programmer.

Ef

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

2011-11-10 Thread Greg Dorner
My biggest pet peeve is the  3am panic mode and you desperately look up the 
message to see:

User Action: Contact your system programmer.


My mind goes blank for a second, then I start to come to terms with the fact 
that I am him, and he doesn't know what the heck is wrong or he wouldn't have 
looked up the durn message!

Oh well, the Packers are 8-0.  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

2011-11-09 Thread Dr. Stephen Fedtke
hi all,

I get the following error within a rexx trying to allocate a file to the
internal reader:

SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

rexx:

ADDRESS TSO  
ALLOC FI(JCL) SYSOUT(A) WRITER(INTRDR) REU 


rexx becomes executed in a EXEC PGM=IKJEFT01  batch environment.

does anybody have an idea?

best
stephen



---
Dr. Stephen Fedtke
Enterprise-IT-Security.com

Seestrasse 3a
CH-6300  Zug
Switzerland
Tel. ++41-(0)41-710-4005
www.enterprise-it-security.com


++NEWS++ SF-SecuClean provides state-of-the-art resource access monitoring
and cleanup procedures for RACF ++NEWS++

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

2011-11-09 Thread Mark Zelden
On Wed, 9 Nov 2011 17:01:03 +0100, Dr. Stephen Fedtke 
max_mainframe_...@fedtke.com wrote:

hi all,

I get the following error within a rexx trying to allocate a file to the
internal reader:

SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

rexx:

ADDRESS TSO
ALLOC FI(JCL) SYSOUT(A) WRITER(INTRDR) REU


rexx becomes executed in a EXEC PGM=IKJEFT01  batch environment.

does anybody have an idea?


Are there any RACF messages in the joblog / syslog?  Are you protecting any of
the JES* resources with whatever security product is active?

Regards,

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS   
mailto:m...@mzelden.com
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

2011-11-09 Thread Walt Farrell
On Wed, 9 Nov 2011 17:01:03 +0100, Dr. Stephen Fedtke 
max_mainframe_...@fedtke.com wrote:

I get the following error within a rexx trying to allocate a file to the
internal reader:

SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

rexx:

ADDRESS TSO
ALLOC FI(JCL) SYSOUT(A) WRITER(INTRDR) REU


rexx becomes executed in a EXEC PGM=IKJEFT01  batch environment.

does anybody have an idea?

You're not authorized to submit jobs, therefore you can't allocate an internal 
reader. Basically, you lack authority to the JCL resource in the TSOAUTH class, 
or possibly if you're using UADS rather than TSO segments, and don't have the 
TSOAUTH class active, you don't have the appropriate authority in your UADS 
entry.

-- 
Walt Farrell
IBM STSM, z/OS Security Design

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

2011-11-09 Thread Shmuel Metz (Seymour J.)
In 2009170103.ga10...@mail03d.hostcenter.com, on 11/09/2011
   at 05:01 PM, Dr. Stephen Fedtke max_mainframe_...@fedtke.com
said:

SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION
SPECIFIED

Try issuing PROFILE MSGID first, then look up the message. Also check
for ICH messages.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see http://patriot.net/~shmuel/resume/brief.html 
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


Re: SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION SPECIFIED

2011-11-09 Thread Walt Farrell
On Wed, 9 Nov 2011 12:50:59 -0500, Shmuel Metz (Seymour J.) 
shmuel+ibm-m...@patriot.net wrote:

In 2009170103.ga10...@mail03d.hostcenter.com, on 11/09/2011
   at 05:01 PM, Dr. Stephen Fedtke max_mainframe_...@fedtke.com
said:

SYSOUT DATA SET NOT ALLOCATED, USER NOT AUTHORIZED FOR FUNCTION
SPECIFIED

Try issuing PROFILE MSGID first, then look up the message. Also check
for ICH messages.


Generally an excellent approach and recommendation, Shmuel.

Wouldn't help in this case, I'm afraid. The relevant TSO/E message gives two 
dynamic allocation error return codes that are relevant, but both of them just 
say talk to your RACF admininstrator. And given the design of the TSO 
processing for this there are no ICH messages.

But it has to be either lack of authority to JCL in the TSOAUTH class or an 
issue with UADS authorities.

-- 
Walt Farrell
IBM STSM, z/OS Security Design

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html