SDSF access

All about SAF, RACF, encryption, Firewall, Risk assessment and integrity concepts
User avatar
jaggz
Posts: 356
Joined: Fri Jul 23, 2010 8:51 pm
Skillset: JCL, VSAM,RACF,ACF2,MQ SERIES
Referer: inernet

SDSF access

Postby jaggz » Fri Jun 01, 2012 9:43 am

Dear Forum members,

I have used the below command to permit the user to access SDSF but still the user is getting the below error even after Logging of and Logging on :

Code: Select all

PERMIT GROUP.ISFUSER.SDSF CLASS(SDSF) ID(TBOLXXX) ACCESS(READ)
SETR RACLIST(SDSF) REFR


Code: Select all

ISF024I USER NOT AUTHORIZED TO SDSF, NO GROUP ASSIGNMENT   
*** 


I am little puzzled that I could not Find the parmlib member ISFPRMXXX in any of my Parmlib Datasets(SYS1.PARMLIB,CPAC.PARMLIB,SYS1.IBM.PARMLIB), But when I check the other user group name By issuing "WHO" command from SDSF they are assigned to the group name ISFUSER.

Z/OS release : Z/OS 1.8

Could anyone please shed some light on the above

Jaggz

steve-myers
Global moderator
Posts: 2105
Joined: Thu Jun 03, 2010 6:21 pm
Skillset: Assembler, JCL, utilities
Referer: zos.efglobe.com

Re: SDSF access

Postby steve-myers » Fri Jun 01, 2012 11:19 am

  • SDSF documentation is pretty lousy, but HAVE YOU CHECKED IT? It will probably tell you what is going on. It took me less than 2 minutes to find the ISF024I message, though with no knowledge about your setup I cannot offer any ideas.

User avatar
jaggz
Posts: 356
Joined: Fri Jul 23, 2010 8:51 pm
Skillset: JCL, VSAM,RACF,ACF2,MQ SERIES
Referer: inernet

Re: SDSF access

Postby jaggz » Fri Jun 01, 2012 11:50 am

dear Steve,

In our shop for Z/OS 1.8 the SDSF server is not being used. The error code ISF024I just says that the id could not be placed in a group, so I am just understanding if there is any alternative way when SDSF is not running as server.

Any suggestions would be really great enough.

angrybeaver
Posts: 11
Joined: Sat Jan 21, 2012 10:09 am
Skillset: zOS
Referer: internet

Re: SDSF access

Postby angrybeaver » Tue Jun 12, 2012 12:37 am

You could temporarily turn on UAUDIT and see which specific profiles the user is failing on then turn it back off.


  • Similar Topics
    Replies
    Views
    Last post