The CA Endevor package ship option for the confirmation is not working correctly.

Products

• Endevor
• Endevor Natural Integration
• Endevor - ECLIPSE Plugin
• Endevor - Enterprise Workbench

Issue/Introduction

The Endevor ship setup was defined as:

The RACF option of batchallracf was defined to the host:  What does this mean?

When you specify BATCHALLRACF, any batch job that does not have a RACF-defined user specified on the USER parameter of the JOB statement, or propagated security information associated with it, fails.

Specifying NOBATCHALLRACF allows such jobs to run.

 

To prevent unauthorized users from running batch jobs, enter the following:

SETROPTS JES(BATCHALLRACF)

RACF was getting a security violation when using the alternate user id or the user id defined in the package ship.

This was causing a deadly embrace since they could not run the confirmation at all.

 

How do i get around the problem of having the batchallracf and the ids not being allowed to
have access through RACF to run the confirmation step?

Environment

Release:
Component: ENDBAS

Resolution

This setup allows the confirmation to work correctly:

Issue the following RACF commands to the RACFVARS class to make RACF treat PRD as a local
node to DEV (and visa versa).

On the PRD LPAR issue the following:
RALT RACFVARS &RACLNDE ADDMEM(DEV)

On the DEV LPAR issue the following:
RALT RACFVARS &RACLNDE ADDMEM(PRD)

The problem came down to not having NJE set up to go from the production LPAR
back to the development LPAR