Starting SDSF Under Top Secret Receives ISF024I NOT AUTHORIZED TO SDSF, NO GROUP

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

With the new z/os 2.1 RSU maintenance, IBM introduces a new SDSFAUX address space. But SDSFAUX requires SDSF address space.
When starting SDSF address space, it comes up with message:

ISF024I USER xxxxx NOT AUTHORIZED TO SDSF, NO GROUP ASSIGNMENT

Environment

Release:
Component: TSSMVS

Resolution

- Apply two IBM z/OS 2.1 APARS: PI54862 and PI57675.
- Set up 2 servers: SDSF and SDSFAUX
- Copy ISF.SISFJCL(ISFPRM01) to ISFPRM00.
- Bring up SDSF server with ISFPRM00 startup parm. The SDSF server will automatically bring up SDSFAUX. There is no parmlib member for SDSFAUX.
- In Top Secret, issue:
    TSS ADD(STC) PROCN(SDSF) ACID(????)
    TSS ADD(STC) PROC(SDSFAUX) ACID(????)
- After both SDSF and SDSFAUX address spaces are up. Define this:
    TSS ADD(xxxxxxx) SDSF(ISF.CONNECT)
    TSS PER(???????) SDSF(ISF.CONNECT) <== this allows ??????? userid to connect to SDSFAUX server.
    TSS PER(???????) SDSF(ISFCMD.ODSP.PARMLIB) <== this allows ????? userid to use SDSF PARMLIB command
    TSS PER(???????) SDSF(ISFCMD.ODSP.SYS) <== this allows ????? userid to use SDSF SYS command
    TSS PER(???????) SDSF(ISFCMD.ODSP.APF) <== this allows ????? userid to use SDSF APF command
    TSS PER(???????) SDSF(ISFCMD.ODSP.LPA) <== this allows ????? userid to use SDSF LPA command
    TSS PER(???????) SDSF(ISFCMD.ODSP.LNKLST) <== this allows ????? userid to use SDSF LNKLST command
    TSS PER(???????) SDSF(ISFCMD.ODSP.PAGE) <== this allows ????? userid to use SDSF PAGE command
- Now, logon with ???????, go to SDSF and issue following new SDSF commands:
    SYS, PARMLIB, APF, LNKLST, LPA, PAGE