I am submitting a batch job from CICS but the job fails with message ACF01008 UNAUTHORIZED INPUT SOURCE FOR LOGONID lid

book

Article ID: 40998

calendar_today

Updated On:

Products

ACF2 ACF2 - DB2 Option ACF2 for zVM ACF2 - z/OS ACF2 - MISC PanApt PanAudit

Issue/Introduction

Question:

I am trying to submit a batch job from a CICS region.
The logonid, that the job will run under, has PROGRAM(DFHKETCB) SUBAUTH RESTRICT
defined.

The batch job fails with message ACF01008 UNAUTHORIZED INPUT SOURCE FOR LOGONID lid 

Why is this failing?

 

Answer:

The SUBAUTH parameter on the logonid record means that the submitting program must be APF authorized.
In this case the submitting program is DFHKETCB.

This is a special situation because DFHKETCB is APF authorised, otherwise CICS would not start,
However, once it starts its task, it internally becomes non-apf authorized.

This means that SUBAUTH cannot be referenced on a logonid if PROGRAM(DFHKETCB) is also referenced. 

 

 

Environment

Release:
Component: ACF2MS