TSS7102E Password Missing Submitting Batch Job from CA Top Secret r16 to r15.
Article ID: 44826
Updated On:
Products
Issue/Introduction
Question:
When submitting a batch job from CA Top Secret r16 with RO88932 applied and Control Option JES(NOVERIFY) set to a CA Top Secret r15 remote system, the batch job receives a TSS7102E PASSWORD MISSING.
Answer:
With CA Top Secret r16 with RO88932 applied and Control Option JES(NOVERIFY), the PASSWORD= is not added to the JOB card of the submitted job.
The PASSWORD= was removed starting with r16. Having a PASSWORD= on the JOB card is considered a security hole.
To resolve the TSS7102E PASSWORD MISSING security violation, the submitting acid:
1. Must be PERMITted to the remote NODE with ACCESS(ALL).
Example:
TSS PERMIT(acid) NODES(node.USERJ) ACCESS(ALL)
2. **OR*** the submitter acid must be PERMITted to the remote NODE with ACCESS(UPDATE) and be cross submit authorized on the remote node.
Example:
TSS PERMIT(acid) NODES(node.USERJ) ACCESS(UPDATE)
TSS PERMIT(acid1) ACID(acid2)
If ACCESS level is READ, then jobs need a USER= and PASSWORD= on the JOB card.
If ACCESS level is UPDATE, then a cross submit authorization PERMIT on the remote node too.
If ACCESS level is CONTROL or ALL, no further checking is done on the remote node. No cross submit authorization is needed and no PASSWORD= is needed.
Environment
Component:
Feedback
