SMP/E RECEIVE GIM69278S GIM.ACTION.ALLOW_UNSIGNED_GIMZIP NOT PROTECTED

Products

• Datacom/AD
• Datacom
• Datacom/DB

Issue/Introduction

Datacom AD R15.1 PAX file RECEIVE job AAX20RCB fails with error:

GIM69278S ** SMP/E PROCESSING FAILED. FACILITY CLASS RESOURCE GIM.ACTION.ALLOW_UNSIGNED_GIMZIP IS NOT PROTECTED BY A
             SECURITY MANAGER.

Cause

From the IBM doc, GIM69278S  means:

Explanation
resource
The SAF resource name
System Authorization Facility (SAF) has determined the identified FACILITY class resource is not protected by a security manager. Therefore, SMP/E cannot determine if the current user ID is authorized to the resource or not.

System action
SMP/E processing stops.

Programmer response
For more information, search for the identified resource name in Preparing to use SMP/E in z/OS SMP/E User's Guide.

This is an SMP/E security problem. This was introduced by recent enhancements to SMP/E security. 

Resolution

The userid running the RECEIVE job needs to be granted access to receive an unsigned package.

See documentation section Prepare for Unsigned Packages. It has examples of the security command to use depending on the security package used.

For RACF:

RDEFINE FACILITY GIM.ACTION.ALLOW_UNSIGNED_GIMZIP UACC(NONE)
PERMIT GIM.ACTION.ALLOW_UNSIGNED_GIMZIP CLASS(FACILITY) ID(ibmuser) ACCESS(UPDATE)
SETROPTS RACLIST(FACILITY) REFRESH