IBM Mainframe Forum Index
 
Log In
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register
 

how to give access for this dataset creation error?


IBM Mainframe Forums -> JCL & VSAM
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Tue Jun 17, 2008 9:46 pm
Reply with quote

when i tried to create a dataset or vsam cluster with some other prefix, i am facing this error.

ICH408I USER(OPRTCM ) GROUP(OPR ) NAME( ) 371
ANF.QUEUE CL(DATASET ) VOL(*BLANK)
DEFINE - GROUP NOT DEFINED

I tried to issue 'pe *.** cl(dataset) id(oprtcm) access(alter)'
but it is not working.

how to resolve this issue?
Back to top
View user's profile Send private message
dick scherrer

Moderator Emeritus


Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix

PostPosted: Tue Jun 17, 2008 10:50 pm
Reply with quote

Hello,

Please post the jcl, control statements, and the diagnostic info generated by the problem run.
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 10:42 am
Reply with quote

I am using this jcl.

//CREATE EXEC PGM=IDCAMS
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
DEFINE CLUSTER -
(NAME(ANF.QUEUE) -
VOLUMES(AUSR01) -
INDEXED -
SPEED -
SHAREOPTIONS(4 3)) -
DATA -
(NAME(ANF.QUEUE.DATA) -
CYL(2 1) -
KEYS(20 0) -
RECORDSIZE(1292 2048) -
FREESPACE(10,10) -
CISZ(24576)) -
INDEX -
(NAME(ANF.QUEUE.INDEX))
/*
Back to top
View user's profile Send private message
UmeySan

Active Member


Joined: 22 Aug 2006
Posts: 771
Location: Germany

PostPosted: Wed Jun 18, 2008 11:36 am
Reply with quote

Morning Sir !

Are you in an RACF Administration Group, to have the rights to do a permit like you did ???

Next question, is "ANF" a valid HLQ at your System ???
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 11:44 am
Reply with quote

Pleasant morning!

Yes I have the rights to issue the commands like I did.

I can create clusters with my prefix.
But I cannot create with other prefixes.
Also ANF is a valid prefix.
Back to top
View user's profile Send private message
enrico-sorichetti

Superior Member


Joined: 14 Mar 2007
Posts: 10872
Location: italy

PostPosted: Wed Jun 18, 2008 12:00 pm
Reply with quote

You already debugged the issue,
ask Your security support group to give You the proper permissions on "ANF.---------"

review Your understanding of the permit commands logic
you can issue the permit command only for resources You have control/alter access...

Quote:
I tried to issue 'pe *.** cl(dataset) id(oprtcm) access(alter)'
but it is not working.


I hope that that was a typo.... thanks to &deity that racf is smart,
do You realize that with that command
You were trying to give alter capability to oprtcm to all the dataset in Your installation,
for the happiness of Your security auditing team icon_cool.gif
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 1:25 pm
Reply with quote

Yet I am unclear about this issue.

The ID is not authorized to create a new dataset with someone/other prefix.

According to my level of understanding,
Since the id (oprtcm) is having OPERATIONS attribute, it should have the access to all the datasets. am i right?
Back to top
View user's profile Send private message
enrico-sorichetti

Superior Member


Joined: 14 Mar 2007
Posts: 10872
Location: italy

PostPosted: Wed Jun 18, 2008 1:33 pm
Reply with quote

did You read ??

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ichza780/3.4.5.3?ACTION=MATCHES&REQUEST=operations&TYPE=FUZZY&SHELF=ICHZBK81.bks&DT=20070502112744&CASE=&searchTopic=TOPIC&searchText=TEXT&searchIndex=INDEX&rank=RANK&ScrollTOP=FIRSTHIT#FIRSTHIT
Back to top
View user's profile Send private message
UmeySan

Active Member


Joined: 22 Aug 2006
Posts: 771
Location: Germany

PostPosted: Wed Jun 18, 2008 1:39 pm
Reply with quote

Morning Sir !

So ok, as you said, you are in the admin-group and you have the right's.

There are multiple definitions for your ICH408I.
Your's: DEFINE - GROUP NOT DEFINED

This error occurs when RACF detects an unauthorized attempt to define a RACF-protected resource; for example, by way of RDEFINE for a general resource or ADDSD for a data set.

RACF prevents the request from completing.

User Response: Correct any spelling errors in the group ID and
try again. If you cannot remember the correct group ID, ask your
RACF security administrator to provide you with a valid group ID.
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 2:03 pm
Reply with quote

Thanks to all for your help and warning.
Back to top
View user's profile Send private message
Thiru Chandira Moorthi

New User


Joined: 20 Jun 2007
Posts: 29
Location: chennai

PostPosted: Wed Jun 18, 2008 2:18 pm
Reply with quote

dear all,

i could resolve this issue, there was a mismatch in group attributes.
thanks.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> JCL & VSAM

 


Similar Topics
Topic Forum Replies
No new posts Error to read log with rexx CLIST & REXX 11
No new posts Error when install DB2 DB2 2
No new posts Access to non cataloged VSAM file JCL & VSAM 18
No new posts FINDREP - Only first record from give... DFSORT/ICETOOL 3
No new posts How to access web services/website? Mainframe Interview Questions 4
Search our Forums:

Back to Top