Re: General RACF question for Walt

2018-08-06 Thread Walt Farrell
On Mon, 6 Aug 2018 11:13:49 +, Blake, Daniel J [CTR] wrote: >Years ago I was called to assist two different customers who both screwed up >the only Special userid. In both cases I was able to switch to the IBM >supplied RACF data bases that came with a ServerPac. Logged in with IBMUSER,

Re: General RACF question for Walt

2018-08-06 Thread Elardus Engelbrecht
Mike Schwab wrote: >Isn't that what the SYS1.UADS dataset is for? To allow signons without a >security system? Indeed, but these ids must be pre-defined and tested in the first place in UADS. Anyways, I believe the original poster who really screwed up his system, should by now approach

Re: General RACF question for Walt

2018-08-06 Thread Mike Schwab
Isn't that what the SYS1.UADS dataset is for? To allow signons without a security system? And it using the 8th character as a sequence digit lead to the 7 character TSO limit. On Monday, August 6, 2018, Blake, Daniel J [CTR] < 00f1be92566d-dmarc-requ...@listserv.ua.edu> wrote: > Walt, > >

General RACF question for Walt

2018-08-06 Thread Blake, Daniel J [CTR]
Walt, Years ago I was called to assist two different customers who both screwed up the only Special userid. In both cases I was able to switch to the IBM supplied RACF data bases that came with a ServerPac. Logged in with IBMUSER, switched back and reset the SPECIAL userid. This was many

Re: RACF Question

2017-05-27 Thread scott Ford
0595 Mobile > 626-543-6132 Office ⇐=== NEW > robin...@sce.com > > > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Walt Farrell > Sent: Thursday, May 25, 2017 11:57 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subj

Re: RACF Question

2017-05-25 Thread Jesse 1 Robinson
@LISTSERV.UA.EDU Subject: (External):Re: RACF Question On Thu, 25 May 2017 12:14:46 -0400, scott Ford <idfli...@gmail.com> wrote: >In reading through the RACF manual I have a question about STC definitions. >We have a STC that is doing RACF provisioning. The question is if I >change th

Re: RACF Question

2017-05-25 Thread Walt Farrell
On Thu, 25 May 2017 12:14:46 -0400, scott Ford wrote: >In reading through the RACF manual I have a question about STC definitions. >We have a STC that is doing RACF provisioning. The question is if I change >the below RDEFINE from TRUSTED(YES) to TRUSTED(NO) will still be

Re: RACF Question

2017-05-25 Thread scott Ford
ITschak: todah rabah I was hoping that was the answer. Regards, Scott On Thu, May 25, 2017 at 12:23 PM, IronSphere by SecuriTeam Software < imugz...@gmail.com> wrote: > Trusted attribute ia a kind of bypass security qhile audited. If turn it > off, the user need to have the proper

Re: RACF Question

2017-05-25 Thread IronSphere by SecuriTeam Software
Trusted attribute ia a kind of bypass security qhile audited. If turn it off, the user need to have the proper authority to enter racf commands at hia scope or enterprise widw is has a special attribute. Trusted is easier but more risky. ITschak

RACF Question

2017-05-25 Thread scott Ford
In reading through the RACF manual I have a question about STC definitions. We have a STC that is doing RACF provisioning. The question is if I change the below RDEFINE from TRUSTED(YES) to TRUSTED(NO) will still be able to issue RACF commands ..we pass them through the RACF callable service

z/OS 2.2 install - racf question.

2015-11-04 Thread Mark Pace
In the past when installing a new z/OS - I've always skipped the part that says to Create or Update ICHRDNST. Instead I have copied ICHRIN03 to the new SYS1.LPALIB I've since forgotten why I do this. So I did some research and found that I probably should have converted my ICHRIN03 to STARTED

Re: z/OS 2.2 install - racf question.

2015-11-04 Thread Mark Pace
gt; From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Mark Pace > Sent: Wednesday, November 04, 2015 3:32 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: z/OS 2.2 install - racf question. > > In the past when installing a new z/OS - I've always skippe

Re: z/OS 2.2 install - racf question.

2015-11-04 Thread Nims,Alva John (Al)
ailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Pace Sent: Wednesday, November 04, 2015 3:32 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: z/OS 2.2 install - racf question. In the past when installing a new z/OS - I've always skipped the part that says to Create or Update ICHRDNST. Instead I have c

Re: z/OS 2.2 install - racf question.

2015-11-04 Thread Elardus Engelbrecht
Mark Pace wrote: >Thank you. I noted in a listing of STARTED tasks I had ** with a user of >IBMUSER. I updated it to be =MEMBER. Both you and Alva Nims are of course correct. I do not see any problem with that. But I prefer to use an id, say STCUSR as user and its group, say STCGROUP. That

Re: RACF question

2012-07-11 Thread Bernard Coeytaux
Can you check the the LU or LG command ? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RACF question

2012-07-10 Thread Bernard Coeytaux
A common error is to have the SYS1.HELP in the LINKLIST ... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: RACF question

2012-07-10 Thread Walt Farrell
On Sat, 7 Jul 2012 16:49:13 -0400, Scott Ford scott_j_f...@yahoo.com wrote: Joel, Hers the exact error: 11.51.03 STC00472 CSV025I PROGRAM CONTROLLED MODULE ADDUSER NOT ACCESSED, USE 11.51.03 STC00472 IEF196I CSV025I PROGRAM CONTROLLED MODULE ADDUSER NOT ACCES 11.51.03 STC00472 IEF196I

Re: RACF question

2012-07-07 Thread Scott Ford
you READ access to the data set profile instead. Thanks, Craig From: Scott Ford scott_j_f...@yahoo.com To: IBM-MAIN@LISTSERV.UA.EDU Date: 07/06/2012 15:34 Subject:RACF question Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU

Re: RACF question

2012-07-07 Thread Joel C. Ewing
involved are RACF program protected. Have the system security administrator grant you READ access to the data set profile instead. Thanks, Craig From: Scott Ford scott_j_f...@yahoo.com To: IBM-MAIN@LISTSERV.UA.EDU Date: 07/06/2012 15:34 Subject:RACF question Sent by:IBM

Re: RACF question

2012-07-07 Thread Scott Ford
of the program modules involved are RACF program protected. Have the system security administrator grant you READ access to the data set profile instead. Thanks, Craig From: Scott Ford scott_j_f...@yahoo.com To: IBM-MAIN@LISTSERV.UA.EDU Date: 07/06/2012 15:34 Subject:RACF

Fwd: RACF question

2012-07-07 Thread Scott Ford
Scott ford www.identityforge.com Begin forwarded message: From: Scott Ford scott_j_f...@yahoo.com Date: July 7, 2012 4:49:13 PM EDT To: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Subject: Re: RACF question Joel, Hers the exact error: 11.51.03 STC00472 CSV025I PROGRAM

Re: RACF question

2012-07-07 Thread John McKown
instead. Thanks, Craig From: Scott Ford scott_j_f...@yahoo.com To: IBM-MAIN@LISTSERV.UA.EDU Date: 07/06/2012 15:34 Subject:RACF question Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU All, I have a question, I have

Re: RACF question

2012-07-06 Thread J R
I doubt it. ICH408 message(s) are what you get when RACHECK fails your attempted access. === Date: Fri, 6 Jul 2012 16:35:10 -0400 From: scott_j_f...@yahoo.com Subject: RACF question To: IBM-MAIN@LISTSERV.UA.EDU All, I have a question, I have a customer receiving a csv0025i

Re: RACF question

2012-07-06 Thread Craig . Pace
program protected. Have the system security administrator grant you READ access to the data set profile instead. Thanks, Craig From: Scott Ford scott_j_f...@yahoo.com To: IBM-MAIN@LISTSERV.UA.EDU Date: 07/06/2012 15:34 Subject:RACF question Sent by:IBM

Re: RACF question

2012-07-06 Thread Scott Ford
profile instead. Thanks, Craig From: Scott Ford scott_j_f...@yahoo.com To: IBM-MAIN@LISTSERV.UA.EDU Date: 07/06/2012 15:34 Subject:RACF question Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU All, I have a question, I have