Page 1 of 1

JES2 and NOT AUTHORIZED FOR CMD

PostPosted: Mon Mar 04, 2019 9:26 pm
by samb01
Hello,
in jes2, the commande :


/D SMS
 


give me that message on Top right :


NOT AUTHORIZED FOR CMD
 


this commande



that message


COMMAND NOT AUTHORIZED
 


when i type LOG to see eventually RACF MESSAGES, i see nothing..

How can i do to be abble to type those commands ?

Re: JES2 and NOT AUTHORIZED FOR CMD

PostPosted: Tue Mar 05, 2019 12:05 am
by enrico-sorichetti
after nine years hanging around
You should have been able to answer yourself

SPEAK TO THE SECURITY SUPPORT GROUP

Re: JES2 and NOT AUTHORIZED FOR CMD

PostPosted: Tue Mar 05, 2019 12:12 am
by samb01
I spoke obviously To then but they told me they didn't fine the reason why. That's why i postée here...

Re: JES2 and NOT AUTHORIZED FOR CMD

PostPosted: Tue Mar 05, 2019 2:30 am
by Robert Sample
This sounds to me like an SDSF authorization issue. While ISFPARMS is the classical way to enable access to SDSF commands, more and more often RACF is being used (and ISFPARMS will be replaced by ISFPRMxx in PARMLIB in a future release of z/OS). Perhaps you don't have appropriate access to the SDSF RACF class? If others at your site are having the same issues, then perhaps the SDSF set up in RACF has not been completed? If your site still uses ISFPARMS, perhaps it was not recompiled for the last z/OS release that was installed?

You need to talk to your site support group -- both security AND systems -- to find out what is going on and get it resolved. As usual with security issues, it is not recommended that you try to fix it yourself.

Re: JES2 and NOT AUTHORIZED FOR CMD

PostPosted: Tue Mar 05, 2019 1:46 pm
by samb01
Hello Robert Sample, i think you are right may be i have to talk with systems not RACF Support. But i can't anderstand why i have no error messages in syslog.
Usally there is a error message. May be there is a command to active it ?

Re: JES2 and NOT AUTHORIZED FOR CMD

PostPosted: Tue Mar 05, 2019 3:38 pm
by NicC
May be there is a command to active it ?

Ask your system support when you speak to them.

Re: JES2 and NOT AUTHORIZED FOR CMD

PostPosted: Tue Mar 05, 2019 7:07 pm
by steve-myers
About the lack of a message. There is an option in the RACROUTE macro, which SDSF uses to talk to RACF whether to log a failure. SDSF uses this option. Most of the options in the SDSF Primary Options menu (including LOG and ULOG) are protected in this fashion so the operator console is not flooded with messages and the SMF MAN data set, too, every time SDSF is started.

Yes, assuming your site uses RACF uses RACF, there is a RACF command your support can use to activate SDSF features for you. But you must contact your support.

Re: JES2 and NOT AUTHORIZED FOR CMD

PostPosted: Tue Mar 05, 2019 7:43 pm
by enrico-sorichetti
furthermore the question about sdsf authorizations has been asked and answered here and on the <expert> forum many times

Re: JES2 and NOT AUTHORIZED FOR CMD

PostPosted: Fri Jul 19, 2019 4:36 pm
by nevilh
A bit late to the Party but better late than never. In the later Versions of SDSF there is a set sectrace command in sdsf
if you activate the trace and then issue the command you can go into ULOG and it will give you all the Information
that the RACF People Need to either authorise you or to tell you to go away