I put the same RACROUTE macro in a batch job and it works fine. The problem was
using the RACROUTE in the client's CICS region but this has been solved by
using the EXEC CICS QUERY SECURITY command instead.
I'd like to thank everyone for their help with this.
Regards,
John.
---
The client's quite happy now as it works with EXEC CICS QUERY SECURITY.
We were only able to get a RC=0 on our own LPAR. On the client's LPAR it was a
hard error. It always gave this response combination no matter which class and
resource they tried:
SAF_RC=04
RACF_RC=04
RACF_RSN=00
Regards,
J
Well, under CICS - except perhaps L8 which might set a TCB level ACEE, you are
not going to get the users permission, you will be getting the CICS STC
permission. So the answer will be wrong.
I am not sure which CICS control block contains the ACEE pointer, but if you
are already going to do an A
Thanks Binyamin,
Here are the macros:
RACROUTE REQUEST=AUTH,
CLASS=(R2),
ENTITY=((R3),NONE),
STATUS=ACCESS,
WORKA=(R5),
RELEASE=1.9,
MF=(E,(R1))
RACLST RACR
As to why it work on your LPAR and not the customers you need to look at how to
setup CICS to use RACF. Also CICS you need to look at your CDT entries and you
will probably find you CDT entries have entries that the customer doesn’t
Sent from my iPhone
No one said I could type with one thum
On Mon, 11 Dec 2023 09:50:34 -0600, John Blythe Reid
wrote:
>The client never got the RACROUTE macro to work. Instead they've opted to use
>the CICS command EXEC CICS QUERY SECURITY and that works ok. Does anyone think
>that the problem may be due to issuing a RACROUTE macro inside a CICS
>tr
Show the LIST and EXECUTE form of the RACROUTE.
On Mon, 11 Dec 2023 09:50:34 -0600 John Blythe Reid
wrote:
:>The client never got the RACROUTE macro to work. Instead they've opted to use
the CICS command EXEC CICS QUERY SECURITY and that works ok. Does anyone think
that the problem may be due
The client never got the RACROUTE macro to work. Instead they've opted to use
the CICS command EXEC CICS QUERY SECURITY and that works ok. Does anyone think
that the problem may be due to issuing a RACROUTE macro inside a CICS
transaction ? However the same transaction does work on our LPAR but
Hi Jon,
Muli-User *Single Address Space.
Regards,
David
On 2023-12-01 02:19, Jon Perryman wrote:
The one thing no one has mentioned is MUSASS configuration (Multi-User address
spaces). Has the customer configured MUSASS changes like naming table, exits or
???. For instance, is the STC jobname
The one thing no one has mentioned is MUSASS configuration (Multi-User address
spaces). Has the customer configured MUSASS changes like naming table, exits or
???. For instance, is the STC jobname being appended to distinguish between
production and test? Maybe a RACF trace would show the real r
ronment is running.
Regards, Bob
Robert S. Hansel
Lead RACF Specialist
RSH Consulting, Inc.
617-969-8211
www.linkedin.com/in/roberthansel
www.rshconsulting.com
-Original Message-
Date:Wed, 29 Nov 2023 16:18:49 +
From:Rob Scott
Subject: Re: RACROUTE REQUEST=AUTH problem
Ye
will
occur.
You have at least one of the above conditions
Rob
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
John Blythe Reid
Sent: Wednesday, November 29, 2023 4:14 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: RACROUTE REQUEST=AUTH problem
EXTERNAL EMAIL
Rob
Rob,
I'm looking at SAFPRRET and SAFPRREA in a test on our LPAR. After checking a
non-existent resource SAFPRRET contains X'0004' and SAFPRREA contains
binary zeros. Is the value in SAFPRRET the RACF RC ? The RACROUTE macro return
code in R15 is also X'04'.
Regards,
John.
---
: Re: RACROUTE REQUEST=AUTH problem
EXTERNAL EMAIL
Hi Rob,
Thanks a lot for your reply. However, we executed the SETR LIST command and we
can see that the classes involved are indeed active.
By the way, this is a conversion from Top Secret to RACF.
Regards,
John
Hi Rob,
Thanks a lot for your reply. However, we executed the SETR LIST command and we
can see that the classes involved are indeed active.
By the way, this is a conversion from Top Secret to RACF.
Regards,
John.
--
For IBM-M
DECOUPL= ?
On Wed, 29 Nov 2023 04:42:01 -0600 John Blythe Reid
wrote:
:>We have a CICS module that issues a RACROUTE REQUEST=AUTH to query a user's
access rights to a resource. We execute the module on our LPAR and it works
fine returning RC=0 if the user has access.
:>When we put that same C
Is the class active on customer system?
Use "TSO SETR LIST" to examine class status information.
Rob Scott
Rocket Software
-Original Message-
From: IBM Mainframe Discussion List On Behalf Of
John Blythe Reid
Sent: Wednesday, November 29, 2023 10:42 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subje
17 matches
Mail list logo
