Portal | Manuals | References | Downloads | Info | Programs | JCLs | Master the Mainframes
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Usergroups Profile Log in to check your private messages Log in
 

 

JES2 exit required

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> JCL & VSAM
View previous topic :: :: View next topic  
Author Message
prino

Active Member


Joined: 07 Feb 2009
Posts: 985
Location: Oostende, Belgium

PostPosted: Tue Mar 30, 2010 2:06 pm    Post subject: JES2 exit required
Reply with quote

Does anyone know where I can find a JES2 exit (or that you are willing to share) that simply throws out submitted jobs when, in order of importance


  • the JOBNAME does not start with the same characters as the USERID
  • the JOB statement use PRTY=


Thanks,

Robert
Back to top
View user's profile Send private message

enrico-sorichetti

Global Moderator


Joined: 14 Mar 2007
Posts: 10202
Location: italy

PostPosted: Tue Mar 30, 2010 2:19 pm    Post subject: Reply to: JES2 exit required
Reply with quote

Hi Robert!
most probably the CBT tape might have something useful
Back to top
View user's profile Send private message
prino

Active Member


Joined: 07 Feb 2009
Posts: 985
Location: Oostende, Belgium

PostPosted: Tue Mar 30, 2010 3:03 pm    Post subject: Re: Reply to: JES2 exit required
Reply with quote

enrico-sorichetti wrote:
most probably the CBT tape might have something useful


Hi Enrico,

I did have a look at that, but nothing obvious sprang to mind. From the time I was working (currently sadly "between contracts") I know these kind of exits exist and are pretty normal in most shops, but not so on "that" public z/OS system, where users can pretty much submit jobs with any jobname.
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2422
Location: Netherlands, Amstelveen

PostPosted: Tue Mar 30, 2010 3:19 pm    Post subject:
Reply with quote

Prino,

maybe RACF (if installed) can handle things like that.
Back to top
View user's profile Send private message
prino

Active Member


Joined: 07 Feb 2009
Posts: 985
Location: Oostende, Belgium

PostPosted: Tue Mar 30, 2010 3:23 pm    Post subject:
Reply with quote

Peter,

It is installed and probably can do so, I'm just trying to help the guy who runs the system to find a solution, and if anyone has any hints as to how RACF might help, feel free to share this knowledge.
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2422
Location: Netherlands, Amstelveen

PostPosted: Tue Mar 30, 2010 3:38 pm    Post subject:
Reply with quote

The following manual :

z/OS V1R9.0 Security Server RACF Security Administrator's Guide
SA22-7683-11

Gives information like :

Forcing Batch Users to Identify Themselves to RACF

And of course a lot more.
Back to top
View user's profile Send private message
Anuj Dhawan

Senior Member


Joined: 22 Apr 2006
Posts: 6258
Location: Mumbai, India

PostPosted: Tue Mar 30, 2010 4:10 pm    Post subject:
Reply with quote

At this new shop, we're allowed to SUBmit a JOB only when the first letter of job is "some special character" provided by them. I believe this is pretty much similar to what you asked for. I'm just an Application Engineer and can't answer right away about the JES2 exit they might have used, so I sent a note to our system-programmers, hope I'll here back from them soon.
Back to top
View user's profile Send private message
prino

Active Member


Joined: 07 Feb 2009
Posts: 985
Location: Oostende, Belgium

PostPosted: Tue Mar 30, 2010 4:25 pm    Post subject:
Reply with quote

Anuj Dhawan wrote:
At this new shop, we're allowed to SUBmit a JOB only when the first letter of job is "some special character" provided by them. I believe this is pretty much similar to what you asked for. I'm just an Application Engineer and can't answer right away about the JES2 exit they might have used, so I sent a note to our system-programmers, hope I'll here back from them soon.


Actually, what we want is that user QWERTY can only submit jobs with jobnames that start with QWERTY (and one or two freely selected characters). What we have now is
Code:

JOBNAME  StepName ProcStep JobID    Owner 
BKDN27   COBOL    COBOL    JOB96544 GD04   
BKDN29   COBOL    COBOL    JOB96555 GD04   
PN1OOO1A STEP1             JOB96551 PN10001
TS10002A COBOL    COBOL    JOB96537 GD03   
ZIND008A STEP1    COBOL    JOB96541 ZINM013


And this makes it hard to "process" dimwit users... (I leave it to your imagination what is meant by "process" icon_evil.gif )

Knocking up an edit macro to override submit would take me a few minutes, but users can of course trivially override this, although I do expect that it would catch most of them.
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2422
Location: Netherlands, Amstelveen

PostPosted: Tue Mar 30, 2010 4:33 pm    Post subject:
Reply with quote

Once again :

z/OS V1R10.0 JES2 Initialization and Tuning Guide
SA22-7532-08

Chapter : Providing security for JES2

Subchapter : Controlling input to your system
Back to top
View user's profile Send private message
nevilh

Active User


Joined: 01 Sep 2006
Posts: 258

PostPosted: Tue Mar 30, 2010 4:52 pm    Post subject:
Reply with quote

If you just wish to stop people submitting jobs with "incorrect" jobnames/jobcards from tso. By far the easiest way is installing the TSO submit exit (IKJEFF10)
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2422
Location: Netherlands, Amstelveen

PostPosted: Tue Mar 30, 2010 5:02 pm    Post subject:
Reply with quote

Hello nevilh,

thought that IKJEFLD was used for the TSO logon/logoff process.
Back to top
View user's profile Send private message
nevilh

Active User


Joined: 01 Sep 2006
Posts: 258

PostPosted: Tue Mar 30, 2010 5:05 pm    Post subject:
Reply with quote

Quote:
thought that IKJEFLD was used for the TSO logon/logoff process.
It is . I had a typo in, you were obviously writing as I was correcting.. Thanks for trying to keep me honest
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> JCL & VSAM All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts How to display value of an exit param... lind sh CICS 2 Sun Oct 09, 2016 12:28 pm
No new posts A sample of exit program for exit XMN... lind sh CICS 2 Mon Oct 03, 2016 5:07 pm
No new posts SORT - E15 and E35 using same user ex... Abhi Nature DFSORT/ICETOOL 12 Mon Oct 03, 2016 4:33 pm
No new posts How to download JES2 JOB LOG? White.Bai JCL & VSAM 9 Thu Sep 29, 2016 7:34 am
No new posts How to use my exit program. lind sh CICS 1 Tue Sep 13, 2016 1:54 pm


Facebook
Back to Top
 
Mainframe Wiki | Forum Rules | Bookmarks | Subscriptions | FAQ | Tutorials | Contact Us