IBM Mainframe Forum Index
 
Log In
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register
 

Procedure name TSOUSER has not been authorized for this ID


IBM Mainframe Forums -> TSO/ISPF
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
henry888

New User


Joined: 21 Sep 2009
Posts: 51
Location: china

PostPosted: Tue Dec 22, 2009 3:02 pm
Reply with quote

Hello,
I just created a new TSO user ID by RACF,and when I use the new ID to logon,get the error msg "procedure name TSOUSER has not been authorized for this ID".
TSOUSER is a procedure in SYS1.LOGON and my another ID using this procedure is working fine.
How can I authorize TSOUSER to the new ID?
the bellow is the logon picture:
------------------------------- TSO/E LOGON -----------------------------------
IKJ56483I THE PROCEDURE NAME TSOUSER HAS NOT BEEN AUTHORIZED FOR THIS USERID
IKJ56429A REENTER -
Enter LOGON parameters below: RACF LOGON parameters:

Userid ===> CN8888

Password ===> New Password ===>

Procedure ===> TSOUSER Group Ident ===>

Acct Nmbr ===> 12345678

Size ===> 6000

Perform ===>

Command ===> LOGOFF

I have the PACF administrative authorization,could some one help?

Thanks.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Tue Dec 22, 2009 3:05 pm
Reply with quote

You need to look at the authorisation for the profile protecting the resource.
Back to top
View user's profile Send private message
henry888

New User


Joined: 21 Sep 2009
Posts: 51
Location: china

PostPosted: Tue Dec 22, 2009 3:23 pm
Reply with quote

Could you give more directions,thanks.
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2481
Location: Netherlands, Amstelveen

PostPosted: Tue Dec 22, 2009 3:33 pm
Reply with quote

RACF Starter System for MVS GG24-3120
Back to top
View user's profile Send private message
enrico-sorichetti

Superior Member


Joined: 14 Mar 2007
Posts: 10873
Location: italy

PostPosted: Tue Dec 22, 2009 3:36 pm
Reply with quote

Quote:
Could you give more directions,thanks.

the issue should already be documented in Your organization standards and howto manuals

anyway here something to meditate on ...
security manager bookshelf
publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/Shelves/ICHZBK90
tso/e bookshelf
publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/Shelves/IKJ4BK90

another good source of info would be..
searching www.redbooks.ibm.com/ for
the family of ABC of System Programming zOS collection
vol01 sg246981.pdf
vol02 sg246982.pdf
vol03 sg246983.pdf
vol05 sg246985.pdf
vol06 sg246986.pdf
vol07 sg246987.pdf
vol08 sg246988.pdf
vol09 sg246989.pdf
vol10 sg246990.pdf
vol11 sg246327.pdf

zOS_basics sg246366.pdf

and do a bit of reading
Back to top
View user's profile Send private message
Pedro

Global Moderator


Joined: 01 Sep 2006
Posts: 2547
Location: Silicon Valley

PostPosted: Tue Dec 22, 2009 11:06 pm
Reply with quote

See 'System Programming Command Reference' here:
www-03.ibm.com/systems/z/os/zos/bkserv/r11pdf/#tsoe

Use the Account command to authorize a logon proc to a userid.
Back to top
View user's profile Send private message
henry888

New User


Joined: 21 Sep 2009
Posts: 51
Location: china

PostPosted: Tue Dec 22, 2009 11:23 pm
Reply with quote

PeterHolland wrote:
RACF Starter System for MVS GG24-3120


sorry,I am not very understanding,could you please give a detailed explain?
Back to top
View user's profile Send private message
Robert Sample

Global Moderator


Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA

PostPosted: Tue Dec 22, 2009 11:32 pm
Reply with quote

The message indicates the user id set up has not been completed. Either you need to add the user id to a group that is allowed access to TSO, or you need to use the ACCOUNT command in TSO to finish the set up. In either case, you are woefully under informed for someone issuing RACF commands -- you really need to spend more time reading the manuals to understand (1) what the error messages mean when they appear, and (2) how to completely implement the facilities you are attempting to implement.
Back to top
View user's profile Send private message
Pedro

Global Moderator


Joined: 01 Sep 2006
Posts: 2547
Location: Silicon Valley

PostPosted: Wed Dec 23, 2009 4:08 am
Reply with quote

Doh!
Quote:
Use the Account command to authorize a logon proc to a userid.


I am probably stuck in a time warp. The account command was good advice a long time ago. Probably, use the RACF command, ALTUSER, to set values in the TSO segment.
Back to top
View user's profile Send private message
henry888

New User


Joined: 21 Sep 2009
Posts: 51
Location: china

PostPosted: Wed Dec 23, 2009 9:07 am
Reply with quote

when using RACF to define TSO user ID,I've set the TSOPROC with value TSOUSER which is being used for other IDs.
The below is the TSO information selected in USER PROFILE:
TSO INFORMATION
---------------
ACCTNUM= 12345678
JOBCLASS= A
PROC= TSOUSER
SIZE= 00006000
MAXSIZE= 00000000
UNIT= SYSDA
USERDATA= 0000
COMMAND= LOGOFF
And you can find TSOUSER is the Procedure I have to use for loggging on TSO.
Back to top
View user's profile Send private message
henry888

New User


Joined: 21 Sep 2009
Posts: 51
Location: china

PostPosted: Wed Dec 23, 2009 1:19 pm
Reply with quote

and in addition,the TSO logon procedure TSOUSER's detailed information:
(1)SYS1.LOGON(TSOUSER)
Code:
//TSOUSER  PROC                                                     
//*****************************************************************
//* TSOUSER LOGON PROCEDURE     (USED FOR TSO ONLY FUNCTIONS)       
//* ALL ALLOCATIONS ARE DONE IN "CENTER.CLIST(TSOUSER)"             
//*****************************************************************
//TSOUSER  EXEC PGM=IKJEFT01,DYNAMNBR=250,PARM='%TSOUSER'           
//SYSPROC  DD DSN=CENTER.CLIST,DISP=SHR                             
//SYSHELP  DD DSN=SYS1.HELP,DISP=SHR                               
//SYSLBC   DD DSN=SYS1.BRODCAST,DISP=SHR                           
//SYSPRINT DD TERM=TS,SYSOUT=X                                     
//SYSTERM  DD TERM=TS,SYSOUT=X                                     
//SYSIN    DD TERM=TS                                               
//*                                                                 

(2)CENTER.CLIST(TSOUSER)
this is the details for initiating the new user.

and I checked there is no RACF description for SYS1.* and CENTER.*
Back to top
View user's profile Send private message
Pedro

Global Moderator


Joined: 01 Sep 2006
Posts: 2547
Location: Silicon Valley

PostPosted: Wed Dec 23, 2009 10:20 pm
Reply with quote

Are there any messages in the system log?
Back to top
View user's profile Send private message
henry888

New User


Joined: 21 Sep 2009
Posts: 51
Location: china

PostPosted: Thu Dec 24, 2009 12:30 pm
Reply with quote

Hi all guys,

Thanks very much for all your guides and suggestions.

The problem has been solved.The key is that I should connect the new user to the resource class TSOPROC and profile TSOUSER.

Tomorrow is Christmas Day,hope everyone will have a perfect holiday!
Back to top
View user's profile Send private message
dick scherrer

Moderator Emeritus


Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix

PostPosted: Sat Dec 26, 2009 3:58 am
Reply with quote

Good to hear it is working - thank you for letting us know icon_smile.gif

Merry Christmas to you and yours too icon_biggrin.gif

d
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> TSO/ISPF

 


Similar Topics
Topic Forum Replies
No new posts Invoke stored procedure via batch JCL. DB2 2
No new posts Calling COBOL DB2 program from a COBO... COBOL Programming 2
No new posts Cond parameter and Rc code of a proce... JCL & VSAM 5
This topic is locked: you cannot edit posts or make replies. Internal Autonomous Stored Procedure ... DB2 6
No new posts AUTHORIZED database error in HALDB IMS DB/DC 2
Search our Forums:

Back to Top