ACF01004 LOGONID sysa NOT FOUND observed when NJE from RACF /JES2 to ACF2 /JES3.

book

Article ID: 223024

calendar_today

Updated On:

Products

CA ACF2 - z/OS

Issue/Introduction

Attempting to configure internal NJE nodes to accept jobs initiated from JES2 /RACF to execute on JES3 /ACF2 without specifying the userid and password on the jobcard. 
How can this be accomplished? 

The GSO NJE option setting are :

  NODE       VALIDATE    VALIDATE   INHERIT-       SEND         DEFAULT   SYSOUT
NAME OR   INCOMING  OUTGOING    ANCE       ENCRYPTED  LOGONID  DEFAULT
MASK        JOBS         JOBS     ALLOWED  PASSWORD                LOGONID
(BOTH)        (IN)        (OUT)      (IN)          (OUT)        (IN)     (IN) 
=======     ========      ========  ========    ========      =======  =======  
********      YES           NO        YES           NO          <NONE>    <NONE>
  • There are three internal systems -

    SYSA   (JES2 /RACF),
    SYSB   (JES3 /ACF2),
    SYSC   (JES3 /RACF).  

    When a JOB is submitted to SYSA to SYSB and SYSC, the job executes on SYSC as expected using
    credentials from SYSA without the user/password specified on the job card.

The same job routed to SYSB results in;

ACF01004 LOGONID SYSA NOT FOUND ç LOGONID is not submitters name, but is the node name. 
ACFJ225 JOB SUBMISSION NOT AUTHORIZED
IAT6100 (JOBnnnnn) JOB USER123 (JOBnnnnn), PRTY=0n, ID=USERID1 ç JES seem to have obtained the submitter’s ID
JOB FAILS - The node id is not defined as a valid LID.

A trace of the NJE traffic from SYSA to SYSB shows the information as expected in the NJE header sections on the transmit and receive records.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Enhanced ACF2 JES3 / JES3+ interface to recognize inbound NJE inheritance data from non-ACF2 nodes.
Apply published solution : LU02567 - ACF2 JES3 LOGONID INHERITANCE FROM NON-ACF2 SENDERS