Portal | Manuals | References | Downloads | Info | Programs | JCLs | Master the Mainframes
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Usergroups Profile Log in to check your private messages Log in
 

 

TSO Logon Failing - Acount Not matching

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> TSO/ISPF
View previous topic :: :: View next topic  
Author Message
SLNewton

New User


Joined: 13 Jun 2016
Posts: 1
Location: USA

PostPosted: Thu Aug 25, 2016 9:37 pm    Post subject: TSO Logon Failing - Acount Not matching
Reply with quote

Hi! I am filling in for a RACF administrator who left suddenly, until new RACF administrator brought on board. I received a request for a new TSO/ISPF ID and access. I used the RACF function to "clone" an existing, working ID who does similar work. But, when I try to logon with the new ID, I get this message (ID and other information replaced with "?"):

ICH70001I ????? LAST ACCESS AT 08:56:49 ON THURSDAY, AUGUST 25, 2016

????? LOGON IN PROGRESS AT 08:57:50 ON AUGUST 25, 2016

LOGON AND ACCT NOT IN SYNC - PLEASE LOGON WITH CORRECT USERID AND ACCT INFO

LOGON FAILED ALLOCATION UNSUCCESSFUL

????? LOGGED OFF TSO AT 08:57:51 ON AUGUST 25, 2016

Yes, I have created an alias in the Master Catalog, and associated a User Catalog. And, there is an 9-character ACCTNUM in the RACF TSO information, ?????????, which is the same as the one on the model ID, and incidentally, the one for my ID. From the message, I suspect that I need to update it in some way, but have no idea where it is located, or what might need to be updated.

Yes, I have looked in some of the RACF manuals, but did not find anything helpful. If someone could give me a pointer to the relevant manual, or suggest another way forward, I would be very grateful.

Thanks
Steve Newton
Back to top
View user's profile Send private message

steve-myers

Active User


Joined: 30 Nov 2013
Posts: 462
Location: The Universe

PostPosted: Fri Aug 26, 2016 12:40 am    Post subject:
Reply with quote

The account in the RACF TSO segment (or entered by the user on the TSO/E LOGON screen) must match a profile in the RACF ACCTNUM class - and the user must have READ access to the profile.

That's just a best guess since I know nothing about your setup. Good luck.

Code:
lu adummy tso                                                               
 USER=ADUMMY  NAME=A DUMB USER           OWNER=STCUSER   CREATED=13.059     
  DEFAULT-GROUP=USERG02   PASSDATE=16.064  PASS-INTERVAL=180               
  ATTRIBUTES=GRPACC                                                         
  REVOKE DATE=NONE   RESUME DATE=NONE                                       
  LAST-ACCESS=16.237/09:29:34                                               
  CLASS AUTHORIZATIONS=NONE                                                 
  NO-INSTALLATION-DATA                                                     
  NO-MODEL-NAME                                                             
  LOGON ALLOWED   (DAYS)          (TIME)                                   
  ---------------------------------------------                             
  ANYDAY                          ANYTIME                                   
   GROUP=USERG02   AUTH=USE      CONNECT-OWNER=STCUSER   CONNECT-DATE=13.059
     CONNECTS=   930  UACC=READ     LAST-CONNECT=16.237/09:29:34           
     CONNECT ATTRIBUTES=NONE                                               
     REVOKE DATE=NONE   RESUME DATE=NONE                                   
 SECURITY-LEVEL=NONE SPECIFIED                                             
 CATEGORY-AUTHORIZATION                                                     
  NONE SPECIFIED                                                           
 SECURITY-LABEL=NONE SPECIFIED                                             
                                                                           
 TSO INFORMATION                                                           
 ---------------                                                           
 ACCTNUM= 12345678       <--- Account number                                                   
 JOBCLASS= A                                                               
 PROC= SYSUSER                                                             
 SIZE= 00024000                                                             
 MAXSIZE= 00000000                                                         
 UNIT= SYSDA                                                               
 USERDATA= 0000                                                             
 COMMAND= ex (start)

rlist acctnum 12345678                                   
 CLASS      NAME                                         
 -----      ----                                         
 ACCTNUM    12345678                                     
                                                         
 LEVEL  OWNER      UNIVERSAL ACCESS  YOUR ACCESS  WARNING
 -----  --------   ----------------  -----------  -------
  00    PLS             READ               READ    NO     
                                                         
 INSTALLATION DATA                                       
 -----------------                                       
 NONE                                                     
                                                         
 APPLICATION DATA                                         
 ----------------                                         
 NONE                                                     
                                                         
 AUDITING                                                 
 --------                                                 
 FAILURES(READ)                                           
                                                         
 NOTIFY                                                   
 ------                                                   
 NO USER TO BE NOTIFIED
 READY
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> TSO/ISPF All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts Matching with Key at different postions. rajatbagga DFSORT/ICETOOL 12 Wed Nov 09, 2016 10:58 am
No new posts FTOPEN TEMP is failing due to dataset... mbenaud TSO/ISPF 7 Thu Jul 28, 2016 4:28 pm
No new posts File matching with PD key on differen... hiravibk DFSORT/ICETOOL 2 Wed Feb 17, 2016 11:40 pm
No new posts DB2 Query to add matching class column senthamizh DB2 5 Fri Jan 15, 2016 8:32 pm
No new posts Compare Files and extract matching re... vimalravi83 DFSORT/ICETOOL 3 Wed Jan 06, 2016 2:42 pm


Facebook
Back to Top
 
Mainframe Wiki | Forum Rules | Bookmarks | Subscriptions | FAQ | Tutorials | Contact Us