Re: DB2 access and administration security

2012-07-07 Thread Bernd Oppolzer
I believe, the very short answer to this is: you give the DB2 GRANTs to RACF groups instead of individual users, and then you use RACF to do the administration of the RACF groups, that is: if anyone needs some DB2 rights, you make him or her a member of the proper RACF group. You need a naming

Re: RACF question

2012-07-07 Thread Scott Ford
Craig, Here is the problem in a nutshell. Customer has a z/os 1.11 environment. The term used fo the security environment was hardened. But the customer doesn't know their security environment, no documentation, etc. So, we are trying to determine what is causing the s306-30 abend. What RACF

Re: RACF question

2012-07-07 Thread Joel C. Ewing
How is the ADDUSER/AU being invoked? If in batch TSO as a TSO command it should only require RACF SPECIAL authority by the invoking userid (and correct definition to TSO of RACF authorized commands). Unless program access is specifically disallowed by PROGRAM profiles, I would have thought

Re: SYNCSORT - Save a data item for use in OUTREC output

2012-07-07 Thread Wayne Bickerdike
Use an E15 exit to read the input file, store the value you need to preserve and on each successive record just overwrite with the saved value and pass the record to sort. I have a few examples of E15 exit code but the SYNCSORT manual should have some examples of exit code. Wayne Bickerdike On

Re: RACF question

2012-07-07 Thread Scott Ford
Joel, Hers the exact error: 11.51.03 STC00472 CSV025I PROGRAM CONTROLLED MODULE ADDUSER NOT ACCESSED, USE 11.51.03 STC00472 IEF196I CSV025I PROGRAM CONTROLLED MODULE ADDUSER NOT ACCES 11.51.03 STC00472 IEF196I UNAUTHORIZED 11.51.03 STC00472 CSV028I ABEND306-30 JOBNAME=RACF

Off topic

2012-07-07 Thread Scott Ford
Has anyone has messages disappear when the sent them to the listserv ? Scott ford www.identityforge.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message:

Fwd: RACF question

2012-07-07 Thread Scott Ford
Scott ford www.identityforge.com Begin forwarded message: From: Scott Ford scott_j_f...@yahoo.com Date: July 7, 2012 4:49:13 PM EDT To: IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU Subject: Re: RACF question Joel, Hers the exact error: 11.51.03 STC00472 CSV025I PROGRAM

Re: Off topic

2012-07-07 Thread Ed Finnell
There's some pretty nasty malware going around, supposed to strike 'Monday' whenever that is. Usually run with ACK as listserv option and the server will confirm receipt. Course iffin it's in Estonia where it's routed may not mean much In a message dated 7/7/2012 5:05:19 P.M. Central

Re: Off topic

2012-07-07 Thread Steve Comstock
On 7/7/2012 4:21 PM, Ed Finnell wrote: There's some pretty nasty malware going around, supposed to strike 'Monday' whenever that is. Usually run with ACK as listserv option and the server will confirm receipt. Course iffin it's in Estonia where it's routed may not mean much I've heard

Re: RACF question

2012-07-07 Thread John McKown
Do you, somehow, have a STEPLIB in the RACF started task? If so, is it (they if multiple) in the PROGRAM class for the appropriate profile in the PROGRAM class? Also, are all the DSNs APF authorized? If no STEPLIB, look in your LINKLIST. What DSN is ADDUSER being fetched from? If you use DDLIST,

Re: Off topic

2012-07-07 Thread Lloyd Fuller
Yes. I do not remember the name of the malware, but it redirected DNS to a hijacked one. The US FBI set up a clone of the hijacked DNS server and have been running it to take away the malware power for better than a year. The reason for the Monday deadline is that is when the FBI is shutting