CA LDAP receives TSS0207E INSUFFICIENT AUTHORITY FOR FUNCTION

Products

• Top Secret
• LDAP SERVER FOR Z/OS
• Top Secret - LDAP
• Top Secret - LDAP
• CA Identity Manager

Issue/Introduction

CA LDAP receives the following error in the stderr.log:

Ý05/09!14:46:28.011362!1A44580000000003~ conn=1014 op=5 SEARCH RESULT tag=101 err=80 nentries=1 text=LDP2004E Error
issuing  command with R_Admin, function=1, SAF=8, RACF=16, reason=8(0001 
TSS0207E   INSUFFICIENT AUTHORITY FOR FUNCTION 

 

Environment

Release : 16.0

Resolution

User's reading or updating the Top Secret Security File through CA LDAP require TSS ADMIN privileges.

Whatever TSS ADMIN privileges a user has in BATCH, CICS or TSO, is the same privileges under CA LDAP.