I am submitting a batch job from CICS but the job fails with message ACF01008 UNAUTHORIZED INPUT SOURCE FOR LOGONID lid

book

Article ID: 40998

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC CA PanApt CA PanAudit

Issue/Introduction

Question:

I am trying to submit a batch job from a CICS region.
The logonid, that the job will run under, has PROGRAM(DFHKETCB) SUBAUTH RESTRICT
defined.

The batch job fails with message ACF01008 UNAUTHORIZED INPUT SOURCE FOR LOGONID lid 

Why is this failing?

 

Answer:

The SUBAUTH parameter on the logonid record means that the submitting program must be APF authorized.
In this case the submitting program is DFHKETCB.

This is a special situation because DFHKETCB is APF authorised, otherwise CICS would not start,
However, once it starts its task, it internally becomes non-apf authorized.

This means that SUBAUTH cannot be referenced on a logonid if PROGRAM(DFHKETCB) is also referenced. 

 

 

Environment

Release:
Component: ACF2MS