Portal | Manuals | References | Downloads | Info | Programs | JCLs | Mainframe wiki | Quick Ref
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Profile Log in to check your private messages Log in
 
Tivoli OPC-Authorization problem

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics
View previous topic :: :: View next topic  
Author Message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:28 pm    Post subject: More RACF resource classes for OPC/TWS
Reply with quote

Hi Enrico,

After looking at RACF resource classes for OPC/TWS I have a question....

In OPC 9.5 option (Delete CP & reset LTP) I am getting authorization error. Error message is "EQQU000E You are not authorized to use function REFRESH LONG TERM PLAN"

I have gone through few members of TWSvrl.SEQQSAMP but couldn't found more details. Can you please guide me on this.

Thanks.
Back to top
View user's profile Send private message

RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:31 pm    Post subject: Tivoli OPC-Authorization problem
Reply with quote

Hi guys,

We are using 'Operations Planning & Control' for job scheduling.
In OPC 9.5 option (Delete CP & reset LTP) I am getting authorization error. Error message is "EQQU000E You are not authorized to use function REFRESH LONG TERM PLAN"

Can anyone please guide me on this?
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2442
Location: Netherlands, Amstelveen

PostPosted: Wed May 19, 2010 8:39 pm    Post subject:
Reply with quote

Sure,

talk with the scheduling people.

They are the ones to modify Current Plan and/or Long Term Plan
data.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:45 pm    Post subject:
Reply with quote

Hi Peter,

I am having authority to modify CP & LTP. Even I can use other options such as 9.2 (Activate Job Submission) or all Deactivate options in Service functions.
I am getting above mentioned error only while using 9.5 option.
It seems this has been protected through some OPC CLASS. But not bale to trace the class or resolution to this.

Thanks
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2442
Location: Netherlands, Amstelveen

PostPosted: Wed May 19, 2010 8:51 pm    Post subject:
Reply with quote

Hello RK1,

once again talk with the scheduling support.
Modifying, job submission is probably ok, but deleting/resettting is quite another story.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:55 pm    Post subject:
Reply with quote

OK. Thanks Peter.

Actully my ID (RACF profile) has been replicated from PROD LPAR to TEST LPAR. Surprisingly I have authority (9.5) in TEST LPAR & not in PROD. Anyways I will consult with security admin team.
Thanks agin.

Appreciate replies from other users as well.
Back to top
View user's profile Send private message
dick scherrer

Site Director


Joined: 23 Nov 2006
Posts: 19270
Location: Inside the Matrix

PostPosted: Wed May 19, 2010 10:09 pm    Post subject:
Reply with quote

Hello,

Quote:
Surprisingly I have authority (9.5) in TEST LPAR & not in PROD.
This should not be a surprise. It is rather common for people to have more authority/permissions in TEST than in PROD.

Why should someone outside the scheduling/operatoins group(s) have this level of access to PROD? Additions/changes/deletions from PROD should be implemented by the prople who run the Production environment - not the developers.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Thu May 20, 2010 1:23 pm    Post subject:
Reply with quote

Hi Dick,

I do have schedulling authority in PROD as well & I am working on PROD environment PSG/OPS resource. I said 'Surprisingly' because as stated above my RACF ID profile is exactly replicated from PROD to TEST region so if ID has level of access to use 9.5 option in TEST then it should also work in PROD.
But this may be be restriceted in PROD as a precaution only. So I need more information on this to get correct access to my ID.

Thanks.
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2442
Location: Netherlands, Amstelveen

PostPosted: Thu May 20, 2010 1:37 pm    Post subject:
Reply with quote

EQQU000E YOU ARE NOT AUTHORIZED TO USE FUNCTION UUFUNC
Explanation: You have attempted to use function UUFUNC, but you are not authorized.
System action: The request is rejected.
User response: If you want to use UUFUNC, contact your security administrator.

Scheduling authority is not the same as maintenance authority.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Thu May 20, 2010 1:40 pm    Post subject:
Reply with quote

Thanks Peter. Let me check with Security Team.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts LMINIT problem - not finding DDNAME Danielle.Filteau CLIST & REXX 7 Tue Sep 19, 2017 9:57 pm
No new posts Problem commiting to DB2 from IMS MPP Ole Soerensen IMS DB/DC 2 Wed Jul 26, 2017 5:19 pm
No new posts Strings with double quotes having pro... raja Arumugam All Other Mainframe Topics 11 Thu Mar 30, 2017 10:34 am
No new posts Problem reading GTF trace output danik56 ABENDS & Debugging 7 Thu Mar 16, 2017 1:02 pm
No new posts ROUNDED Problem with COMPUTE statement shalem COBOL Programming 11 Thu Feb 09, 2017 8:16 pm

Facebook
Back to Top
 
Job Vacancies | Forum Rules | Bookmarks | Subscriptions | FAQ | Polls | Contact Us