Portal | Manuals | References | Downloads | Info | Programs | JCLs | Master the Mainframes
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Usergroups Profile Log in to check your private messages Log in
 

 

how to give access for this dataset creation error?

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> JCL & VSAM
View previous topic :: :: View next topic  
Author Message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Tue Jun 17, 2008 9:46 pm    Post subject: how to give access for this dataset creation error?
Reply with quote

when i tried to create a dataset or vsam cluster with some other prefix, i am facing this error.

ICH408I USER(OPRTCM ) GROUP(OPR ) NAME( ) 371
ANF.QUEUE CL(DATASET ) VOL(*BLANK)
DEFINE - GROUP NOT DEFINED

I tried to issue 'pe *.** cl(dataset) id(oprtcm) access(alter)'
but it is not working.

how to resolve this issue?
Back to top
View user's profile Send private message

dick scherrer

Site Director


Joined: 23 Nov 2006
Posts: 19270
Location: Inside the Matrix

PostPosted: Tue Jun 17, 2008 10:50 pm    Post subject:
Reply with quote

Hello,

Please post the jcl, control statements, and the diagnostic info generated by the problem run.
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 10:42 am    Post subject: Reply to: how to give access for this dataset creation error
Reply with quote

I am using this jcl.

//CREATE EXEC PGM=IDCAMS
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
DEFINE CLUSTER -
(NAME(ANF.QUEUE) -
VOLUMES(AUSR01) -
INDEXED -
SPEED -
SHAREOPTIONS(4 3)) -
DATA -
(NAME(ANF.QUEUE.DATA) -
CYL(2 1) -
KEYS(20 0) -
RECORDSIZE(1292 2048) -
FREESPACE(10,10) -
CISZ(24576)) -
INDEX -
(NAME(ANF.QUEUE.INDEX))
/*
Back to top
View user's profile Send private message
UmeySan

Active Member


Joined: 22 Aug 2006
Posts: 755
Location: Germany

PostPosted: Wed Jun 18, 2008 11:36 am    Post subject:
Reply with quote

Morning Sir !

Are you in an RACF Administration Group, to have the rights to do a permit like you did ???

Next question, is "ANF" a valid HLQ at your System ???
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 11:44 am    Post subject:
Reply with quote

Pleasant morning!

Yes I have the rights to issue the commands like I did.

I can create clusters with my prefix.
But I cannot create with other prefixes.
Also ANF is a valid prefix.
Back to top
View user's profile Send private message
enrico-sorichetti

Global Moderator


Joined: 14 Mar 2007
Posts: 10256
Location: italy

PostPosted: Wed Jun 18, 2008 12:00 pm    Post subject: Reply to: how to give access for this dataset creation error
Reply with quote

You already debugged the issue,
ask Your security support group to give You the proper permissions on "ANF.---------"

review Your understanding of the permit commands logic
you can issue the permit command only for resources You have control/alter access...

Quote:
I tried to issue 'pe *.** cl(dataset) id(oprtcm) access(alter)'
but it is not working.


I hope that that was a typo.... thanks to &deity that racf is smart,
do You realize that with that command
You were trying to give alter capability to oprtcm to all the dataset in Your installation,
for the happiness of Your security auditing team icon_cool.gif
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 1:25 pm    Post subject:
Reply with quote

Yet I am unclear about this issue.

The ID is not authorized to create a new dataset with someone/other prefix.

According to my level of understanding,
Since the id (oprtcm) is having OPERATIONS attribute, it should have the access to all the datasets. am i right?
Back to top
View user's profile Send private message
enrico-sorichetti

Global Moderator


Joined: 14 Mar 2007
Posts: 10256
Location: italy

PostPosted: Wed Jun 18, 2008 1:33 pm    Post subject: Reply to: how to give access for this dataset creation error
Reply with quote

did You read ??

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza780/3.4.5.3?ACTION=MATCHES&REQUEST=operations&TYPE=FUZZY&SHELF=ICHZBK81.bks&DT=20070502112744&CASE=&searchTopic=TOPIC&searchText=TEXT&searchIndex=INDEX&rank=RANK&ScrollTOP=FIRSTHIT#FIRSTHIT
Back to top
View user's profile Send private message
UmeySan

Active Member


Joined: 22 Aug 2006
Posts: 755
Location: Germany

PostPosted: Wed Jun 18, 2008 1:39 pm    Post subject:
Reply with quote

Morning Sir !

So ok, as you said, you are in the admin-group and you have the right's.

There are multiple definitions for your ICH408I.
Your's: DEFINE - GROUP NOT DEFINED

This error occurs when RACF detects an unauthorized attempt to define a RACF-protected resource; for example, by way of RDEFINE for a general resource or ADDSD for a data set.

RACF prevents the request from completing.

User Response: Correct any spelling errors in the group ID and
try again. If you cannot remember the correct group ID, ask your
RACF security administrator to provide you with a valid group ID.
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 2:03 pm    Post subject:
Reply with quote

Thanks to all for your help and warning.
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 2:18 pm    Post subject:
Reply with quote

dear all,

i could resolve this issue, there was a mismatch in group attributes.
thanks.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> JCL & VSAM All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts Fileaid 2 commands instream work. In ... descann Compuware & Other Tools 2 Tue May 16, 2017 3:31 pm
No new posts find RACF group for access to spooled... jzhardy JCL & VSAM 1 Mon May 08, 2017 11:46 am
No new posts Getting error while opening a variabl... apandey1 COBOL Programming 5 Fri May 05, 2017 12:22 pm
No new posts To find out size allocated to a seque... ashek15 JCL & VSAM 15 Thu Apr 27, 2017 9:42 am
No new posts LISTCAT on a dataset with symbolic pa... shreya19 JCL & VSAM 5 Fri Apr 07, 2017 5:43 pm


Facebook
Back to Top
 
Mainframe Wiki | Forum Rules | Bookmarks | Subscriptions | FAQ | Tutorials | Contact Us