fail to submit jobs
Article ID: 113340
Updated On:
Products
Top Secret
Top Secret - LDAP
Issue/Introduction
After new TSS is installed, we fail to submit jobs. We get these errors:
USER NOT AUTHORIZED FOR SUB+
YOUR TSO ADMINISTRATOR MUST AUTHORIZE USE OF THIS COMMAND
These messages are from TSO, not from CA Top secret.
The user who tried to submit looks like this below:
ACCESSORID = TLVAL NAME = AVNER
TYPE = CENTRAL SIZE = 1280 BYTES
FACILITY = TSO
CREATED = 09/02/18 16:09 LAST MOD = 09/04/18 13:09
ATTRIBUTES = CONSOLE
LAST USED = 09/04/18 11:10 CPU(TLVC) FAC(TSO ) COUNT(00003)
JESSPOOL = SPC
JESJOBS = CANCEL. SUBMIT.
OPERCMDS = JESX.CANCEL JESX.DISPLAY
OPERCMDS = JESX.STOP JES2.
OPERCMDS = JES3. MVS.
SDSF = ISFATTR. ISFCMD.
SDSF = ISFINIT.
XA SDSF = ISF.CONNECT OWNER(MSCA )
ACCESS = READ
XA TSOPROC = SYSLOGON OWNER(SYSDEPT )
----------- SEGMENT OMVS
HOME = / OMVSPGM = /BIN/SH
UID = 0000000000
----------- SEGMENT TSO
TRBA = **NON-DISPLAY FIELD**
TSOCOMMAND =
TSODEFPRFG =
TSOLACCT =
TSOLPROC = SYSLOGON
TSOLSIZE = 0000000
TSOOPT = MAIL,NOTICES,NOOIDCARD
TSOUDATA = 0000
TUPT = **NON-DISPLAY FIELD**
----------- ADMINISTRATION AUTHORITIES
RESOURCE = *ALL*
ACCESS = ALL
ACID = *ALL*
FACILITIES = *ALL*
LIST DATA = *ALL*,PROFILES,PASSWORD,PWVIEW,SESSKEY
MISC1 = *ALL*
MISC2 = *ALL*
MISC3 = *ALL*
MISC8 = *ALL*
MISC9 = *ALL*
TSS0300I LIST FUNCTION SUCCESSFUL
USER NOT AUTHORIZED FOR SUB+
YOUR TSO ADMINISTRATOR MUST AUTHORIZE USE OF THIS COMMAND
These messages are from TSO, not from CA Top secret.
The user who tried to submit looks like this below:
ACCESSORID = TLVAL NAME = AVNER
TYPE = CENTRAL SIZE = 1280 BYTES
FACILITY = TSO
CREATED = 09/02/18 16:09 LAST MOD = 09/04/18 13:09
ATTRIBUTES = CONSOLE
LAST USED = 09/04/18 11:10 CPU(TLVC) FAC(TSO ) COUNT(00003)
JESSPOOL = SPC
JESJOBS = CANCEL. SUBMIT.
OPERCMDS = JESX.CANCEL JESX.DISPLAY
OPERCMDS = JESX.STOP JES2.
OPERCMDS = JES3. MVS.
SDSF = ISFATTR. ISFCMD.
SDSF = ISFINIT.
XA SDSF = ISF.CONNECT OWNER(MSCA )
ACCESS = READ
XA TSOPROC = SYSLOGON OWNER(SYSDEPT )
----------- SEGMENT OMVS
HOME = / OMVSPGM = /BIN/SH
UID = 0000000000
----------- SEGMENT TSO
TRBA = **NON-DISPLAY FIELD**
TSOCOMMAND =
TSODEFPRFG =
TSOLACCT =
TSOLPROC = SYSLOGON
TSOLSIZE = 0000000
TSOOPT = MAIL,NOTICES,NOOIDCARD
TSOUDATA = 0000
TUPT = **NON-DISPLAY FIELD**
----------- ADMINISTRATION AUTHORITIES
RESOURCE = *ALL*
ACCESS = ALL
ACID = *ALL*
FACILITIES = *ALL*
LIST DATA = *ALL*,PROFILES,PASSWORD,PWVIEW,SESSKEY
MISC1 = *ALL*
MISC2 = *ALL*
MISC3 = *ALL*
MISC8 = *ALL*
MISC9 = *ALL*
TSS0300I LIST FUNCTION SUCCESSFUL
Environment
z/OS
Resolution
This user was missing to have the TSO authorization to submit job from TSO.
A permit as it follows, is needed:
TSS PER(acid#) TSOAUTH(JCL)
A permit as it follows, is needed:
TSS PER(acid#) TSOAUTH(JCL)
Additional Information
Go to the link below to have more details about TSOAUTH class within CA Top secret:
https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/using/issuing-commands-to-communicate-administrative-requirements/resources/tsoauth-resource-classsecure-tso-user-attributes
Go to the link below to have more information about TSO resources with CA Top secret:
https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/implementing-in-cics-and-other-interfaces/implementing-security-for-tso/uads-replacement/tso-related-resources
Feedback
Yes
No
Powered by
