Hayim > thanks...racf person looking into it....



From:   Hayim Sokolsky <[email protected]>
To:     [email protected]
Date:   11/30/2010 01:27 PM
Subject:        Re: SDSF display sysout
Sent by:        IBM Mainframe Discussion List <[email protected]>



The ???????? value is set via SETROPTS NJEUNKNOWN. It represents the 
non-ownership of NJE jobs and sysout. It can not be set to an actual RACF 
UserID or group.

RACFVARS &RACLNDE - is a bypass of translation. Putting a JES (or RSCS) 
node in &RACLNDE prevents any substitution of NJE information. Only add 
the LOCAL JES node to &RACLNDE.

The RACF NODES class is used to allow, as well as translate or adjust NJE 
ownership. If you wish to take the AS400 sysout and assign a valid owning 
UserID, use the following profiles:

RDEF NODES as400node.USERS.*  UACC(CONTROL) ADDMEM(otherid) 
RDEF NODES as400node.GROUP%.*  UACC(READ) ADDMEM(&DFLTGRP)

as400node - replace with the actual NJE node name for the AS400
otherid - replace with the local UserID you want to own the sysout.

The GROUP% profile is not necessary if you have already defined:
RDEF NODES *.GROUP%.* UACC(READ) ADDMEM(&DFLTGRP)



Hayim
_____________________________________
Hayim Sokolsky, CISSP
    Mainframe Security Architect
    DTCC Corporate Information Security
    18301 Bermuda Green Dr, MS 1-CIS
    Tampa FL 33647-1760

    Tel. (813) 470-2177

IBM Mainframe Discussion List <[email protected]> wrote on 2010.11.30 
14:05:39:

> >Have sysout transfered--NJE--from an AS400 ... the OWNER filed shows 
> >????????  Where would this default becoming from..and can it be 
altered?
> >
> If you have RACF then I think it is the RACLNODE definitions for sysout.
> 
> Though I could be wrong.
> 
> Lizette
> 
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html


<BR>_____________________________________________________________
<FONT size=2><BR>
DTCC DISCLAIMER: This email and any files transmitted with it are
confidential and intended solely for the use of the individual or
entity to whom they are addressed. If you have received this email
in error, please notify us immediately and delete the email and any
attachments from your system. The recipient should check this email
and any attachments for the presence of viruses.  The company
accepts no liability for any damage caused by any virus transmitted
by this email.</FONT>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
Email Disclaimer
This  E-mail  contains  confidential  information  belonging to the sender, 
which  may be legally privileged information.  This information is intended 
only  for  the use of the individual or entity addressed above.  If you are not 
 the  intended  recipient, or  an  employee  or  agent responsible for 
delivering it to the intended recipient, you are hereby notified that any 
disclosure,  copying, distribution, or the taking of any action in reliance on 
the contents of the E-mail or attached files is strictly prohibited.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to