We have several Logonids that are submitted by our automated scheduling software using the //*JOBFROM statement. Why is the logonid ACC-SRCE field not being updated?

book

Article ID: 52856

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC CA PanApt CA PanAudit

Issue/Introduction

Description:

The logonid ACC-SRCE field is not updated for logonids for jobs that use the //*JOBFROM statement, the last access fields ACC-CNT, ACC-DATE, and ACC-TIME logonid fields are updated once a day.

Solution:

The //*JOBFROM statement lets a job run under a logonid different than that of the submitter, without the submitter providing a password.

Use of the JOBFROM statement bypasses PASSWORD, RESTRICT, PROGRAM, SUBAUTH and SOURCE logonid checks (restrictions). Use of the JOBFROM will only update the last access fields ACC-CNT, ACC-DATE, and ACC-TIME of the logonid once a day (the first use). The last access ACC-SRCE field will not be updated.

Details on the use of //*JOBFROM statement can be found in the ACF2 Security for z/OS Administrator Guide in Chapter 20: JES Security Overview, section "JCL Extensions", sub-section "//*JOBFROM".

Environment

Release:
Component: ACF2MS