JES2 and NOT AUTHORIZED FOR CMD

[samb01]

Hello,
in jes2, the commande :

Code: Select all

/D SMS
 

give me that message on Top right :

Code: Select all

NOT AUTHORIZED FOR CMD
 

this commande

Code: Select all

ULOG
 

that message

Code: Select all

COMMAND NOT AUTHORIZED
 

when i type LOG to see eventually RACF MESSAGES, i see nothing..

How can i do to be abble to type those commands ?

[enrico-sorichetti]

after nine years hanging around
You should have been able to answer yourself

SPEAK TO THE SECURITY SUPPORT GROUP

[samb01]

I spoke obviously To then but they told me they didn't fine the reason why. That's why i postée here...

[Robert Sample]

This sounds to me like an SDSF authorization issue. While ISFPARMS is the classical way to enable access to SDSF commands, more and more often RACF is being used (and ISFPARMS will be replaced by ISFPRMxx in PARMLIB in a future release of z/OS). Perhaps you don't have appropriate access to the SDSF RACF class? If others at your site are having the same issues, then perhaps the SDSF set up in RACF has not been completed? If your site still uses ISFPARMS, perhaps it was not recompiled for the last z/OS release that was installed?

You need to talk to your site support group -- both security AND systems -- to find out what is going on and get it resolved. As usual with security issues, it is not recommended that you try to fix it yourself.

[samb01]

Hello Robert Sample, i think you are right may be i have to talk with systems not RACF Support. But i can't anderstand why i have no error messages in syslog.
Usally there is a error message. May be there is a command to active it ?

[NicC]

May be there is a command to active it ?

Ask your system support when you speak to them.

[steve-myers]

About the lack of a message. There is an option in the RACROUTE macro, which SDSF uses to talk to RACF whether to log a failure. SDSF uses this option. Most of the options in the SDSF Primary Options menu (including LOG and ULOG) are protected in this fashion so the operator console is not flooded with messages and the SMF MAN data set, too, every time SDSF is started.

Yes, assuming your site uses RACF uses RACF, there is a RACF command your support can use to activate SDSF features for you. But you must contact your support.

[enrico-sorichetti]

furthermore the question about sdsf authorizations has been asked and answered here and on the <expert> forum many times

[nevilh]

A bit late to the Party but better late than never. In the later Versions of SDSF there is a set sectrace command in sdsf
if you activate the trace and then issue the command you can go into ULOG and it will give you all the Information
that the RACF People Need to either authorise you or to tell you to go away