Re: Run TSO batch as different user?
Works like a champ. Thank you both. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Gibney, Dave Sent: Wednesday, June 19, 2013 3:13 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Run TSO batch as different user? You don't need to put the password on the job card if you have SURROGAT access to the required userid. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
Absolutely! Forgot about that! -- Regards, Gord Tomlin Action Software International (a division of Mazda Computer Corporation) Tel: (905) 470-7113, Fax: (905) 470-6507 On 2013-06-19 18:10, Ed Jaffe wrote: On 6/19/2013 2:34 PM, Gord Tomlin wrote: Did you try adding the userid and password to the job card? Best to add USER= only and use SURROGAT authority (RACF term, substitute appropriate OEM security product term as needed) rather than specifying a password in the clear. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
In 04c901ce6d5d$0614dde0$123e99a0$@mcn.org, on 06/19/2013 at 07:22 PM, Charles Mills charl...@mcn.org said: Why do you ask? Because LOGON logs you off and start a new session for the same terminal; in batch there is no terminal to log you on to. -- Shmuel (Seymour J.) Metz, SysProg and JOAT Atid/2http://patriot.net/~shmuel We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
In 9064599864404924.wa.paulgboulderaim@listserv.ua.edu, on 06/20/2013 at 12:05 AM, Paul Gilmartin paulgboul...@aim.com said: However, the newfangled address TSO instruction in z/OS UNIX Rexx will create a new address space running the TMP. It won't[1] change the userid for the new address space. [1] For unprivileged users. -- Shmuel (Seymour J.) Metz, SysProg and JOAT Atid/2http://patriot.net/~shmuel We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
...which will of course lead to controversy! ;) -- Regards, Gord Tomlin Action Software International (a division of Mazda Computer Corporation) Tel: (905) 470-7113, Fax: (905) 470-6507 On 2013-06-19 17:34, Gord Tomlin wrote: Did you try adding the userid and password to the job card? -- Regards, Gord Tomlin Action Software International (a division of Mazda Computer Corporation) Tel: (905) 470-7113, Fax: (905) 470-6507 On 2013-06-19 17:21, Charles Mills wrote: Here's an easier and less controversial question. I have used IKJEFT01 lots of times in batch jobs to run TSO commands. IKJEFT01 always runs as my userid, the userid under which I submit the batch job. Can I get IKJEFT01 to run under a different userid, a userid for which I have the password? How? I tried adding LOGON otherid/password and several variations thereof as the first line of SYSTSIN but my SYSTSPRT ends after the LOGON statement with no diagnostics anywhere that I can find. I tried RTFM but don't see anything. Not saying it's not there, saying I didn't find it. Thanks! Charles -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
On Wed, 19 Jun 2013 17:34:17 -0400, Gord Tomlin wrote: Did you try adding the userid and password to the job card? It might be that the OP's desire is that the TMP run under a user ID different from the parent job's, not that the parent job be constrained to run under the user ID intended for the TMP. On 2013-06-19 17:21, Charles Mills wrote: Here's an easier and less controversial question. I have used IKJEFT01 lots of times in batch jobs to run TSO commands. IKJEFT01 always runs as my userid, the userid under which I submit the batch job. Can I get IKJEFT01 to run under a different userid, a userid for which I have the password? How? Ummm... Run a UNIX Rexx program that does a setuid, validating credentials as necessary, then issues the newfangled address TSO? WAG. Untested. Might this use SSL credentials? -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
Thanks. Solved the problem. I'm good. Believe it or not I've never in 44 years of MVS used JOB USER= before that I recall. Addressing various issues: - Mmm, yes, I can see why coding the password on the JOB card could be controversial. :-( - True, this is an answer to a different question but no, I don't care if the job runs under the other userid also. Seems odd to me that the facility I actually asked about does not exist. Seems like a very reasonable sort of thing (neglecting the password issue). Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Gord Tomlin Sent: Wednesday, June 19, 2013 2:34 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Run TSO batch as different user? Did you try adding the userid and password to the job card? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
On 6/19/2013 2:34 PM, Gord Tomlin wrote: Did you try adding the userid and password to the job card? Best to add USER= only and use SURROGAT authority (RACF term, substitute appropriate OEM security product term as needed) rather than specifying a password in the clear. -- Edward E Jaffe Phoenix Software International, Inc 831 Parkview Drive North El Segundo, CA 90245 http://www.phoenixsoftware.com/ -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
You don't need to put the password on the job card if you have SURROGAT access to the required userid. Darn, I see Ed beat me to this. :) Dave Gibney Information Technology Services Washington State University -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Charles Mills Sent: Wednesday, June 19, 2013 3:09 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Run TSO batch as different user? Thanks. Solved the problem. I'm good. Believe it or not I've never in 44 years of MVS used JOB USER= before that I recall. Addressing various issues: - Mmm, yes, I can see why coding the password on the JOB card could be controversial. :-( - True, this is an answer to a different question but no, I don't care if the job runs under the other userid also. Seems odd to me that the facility I actually asked about does not exist. Seems like a very reasonable sort of thing (neglecting the password issue). Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Gord Tomlin Sent: Wednesday, June 19, 2013 2:34 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Run TSO batch as different user? Did you try adding the userid and password to the job card? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
Thanks. Will look into that. Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Gibney, Dave Sent: Wednesday, June 19, 2013 3:13 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Run TSO batch as different user? You don't need to put the password on the job card if you have SURROGAT access to the required userid. Darn, I see Ed beat me to this. :) -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
Most job scheduler programs can assign other user IDs and authenticate them. On Wed, Jun 19, 2013 at 5:08 PM, Charles Mills charl...@mcn.org wrote: Thanks. Solved the problem. I'm good. Believe it or not I've never in 44 years of MVS used JOB USER= before that I recall. deleted -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Gord Tomlin Sent: Wednesday, June 19, 2013 2:34 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Run TSO batch as different user? Did you try adding the userid and password to the job card? -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
Why would you expect that to work? Because IKJEFT01 accepts TSO commands, and LOGON is the TSO command that I would use if I were in a TSO session and wanted to run as a different user. Why do you ask? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Shmuel Metz (Seymour J.) Sent: Wednesday, June 19, 2013 5:35 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Run TSO batch as different user? In 03ef01ce6d32$ee2a1210$ca7e3630$@mcn.org, on 06/19/2013 at 02:21 PM, Charles Mills charl...@mcn.org said: Can I get IKJEFT01 to run under a different userid, a userid for which I have the password? Yes. How? The same as any other program; the userid is on the JOB statement. If you don't have surrogate authority then you also need the password. I tried adding LOGON otherid/password Why would you expect that to work? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Run TSO batch as different user?
LOGON/LOGOFF are one and the same TSO command. Within the running TMP of a foreground TSO address space, LOGON will actually terminate (ie. LOGOFF) that instance of the TMP (and address space) and queue the LOGON command to create a new foreground TSO address space. Batch address spaces aren't created via a LOGON system command. LOGON/LOGOFF is treated as terminate by the TMP. Even if the LOGON were queued, the online parts required to create a new foreground TSO address space do not exist in the batch address space. === Date: Wed, 19 Jun 2013 19:22:33 -0700 From: charl...@mcn.org Subject: Re: Run TSO batch as different user? To: IBM-MAIN@LISTSERV.UA.EDU Why would you expect that to work? Because IKJEFT01 accepts TSO commands, and LOGON is the TSO command that I would use if I were in a TSO session and wanted to run as a different user. Why do you ask? Charles -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Shmuel Metz (Seymour J.) Sent: Wednesday, June 19, 2013 5:35 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Run TSO batch as different user? In 03ef01ce6d32$ee2a1210$ca7e3630$@mcn.org, on 06/19/2013 at 02:21 PM, Charles Mills charl...@mcn.org said: Can I get IKJEFT01 to run under a different userid, a userid for which I have the password? Yes. How? The same as any other program; the userid is on the JOB statement. If you don't have surrogate authority then you also need the password. I tried adding LOGON otherid/password Why would you expect that to work? -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
