|
View previous topic :: View next topic
|
| Author |
Message |
prino
Senior Member
Joined: 07 Feb 2009
Posts: 1306
Location: Vilnius, Lithuania
|
|
|
|
Does anyone know where I can find a JES2 exit (or that you are willing to share) that simply throws out submitted jobs when, in order of importance
- the JOBNAME does not start with the same characters as the USERID
- the JOB statement use PRTY=
Thanks,
Robert |
|
| Back to top |
|
 |
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007
Posts: 10873
Location: italy
|
|
|
|
Hi Robert!
most probably the CBT tape might have something useful |
|
| Back to top |
|
|
prino
Senior Member
Joined: 07 Feb 2009
Posts: 1306
Location: Vilnius, Lithuania
|
|
|
|
| enrico-sorichetti wrote: |
| most probably the CBT tape might have something useful |
Hi Enrico,
I did have a look at that, but nothing obvious sprang to mind. From the time I was working (currently sadly "between contracts") I know these kind of exits exist and are pretty normal in most shops, but not so on "that" public z/OS system, where users can pretty much submit jobs with any jobname. |
|
| Back to top |
|
|
PeterHolland
Global Moderator
Joined: 27 Oct 2009
Posts: 2481
Location: Netherlands, Amstelveen
|
|
|
|
Prino,
maybe RACF (if installed) can handle things like that. |
|
| Back to top |
|
|
prino
Senior Member
Joined: 07 Feb 2009
Posts: 1306
Location: Vilnius, Lithuania
|
|
|
|
Peter,
It is installed and probably can do so, I'm just trying to help the guy who runs the system to find a solution, and if anyone has any hints as to how RACF might help, feel free to share this knowledge. |
|
| Back to top |
|
|
PeterHolland
Global Moderator
Joined: 27 Oct 2009
Posts: 2481
Location: Netherlands, Amstelveen
|
|
|
|
The following manual :
z/OS V1R9.0 Security Server RACF Security Administrator's Guide
SA22-7683-11
Gives information like :
Forcing Batch Users to Identify Themselves to RACF
And of course a lot more. |
|
| Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006
Posts: 6250
Location: Mumbai, India
|
|
|
|
| At this new shop, we're allowed to SUBmit a JOB only when the first letter of job is "some special character" provided by them. I believe this is pretty much similar to what you asked for. I'm just an Application Engineer and can't answer right away about the JES2 exit they might have used, so I sent a note to our system-programmers, hope I'll here back from them soon. |
|
| Back to top |
|
|
prino
Senior Member
Joined: 07 Feb 2009
Posts: 1306
Location: Vilnius, Lithuania
|
|
|
|
| Anuj Dhawan wrote: |
| At this new shop, we're allowed to SUBmit a JOB only when the first letter of job is "some special character" provided by them. I believe this is pretty much similar to what you asked for. I'm just an Application Engineer and can't answer right away about the JES2 exit they might have used, so I sent a note to our system-programmers, hope I'll here back from them soon. |
Actually, what we want is that user QWERTY can only submit jobs with jobnames that start with QWERTY (and one or two freely selected characters). What we have now is
| Code: |
JOBNAME StepName ProcStep JobID Owner
BKDN27 COBOL COBOL JOB96544 GD04
BKDN29 COBOL COBOL JOB96555 GD04
PN1OOO1A STEP1 JOB96551 PN10001
TS10002A COBOL COBOL JOB96537 GD03
ZIND008A STEP1 COBOL JOB96541 ZINM013 |
And this makes it hard to "process" dimwit users... (I leave it to your imagination what is meant by "process"  )
Knocking up an edit macro to override submit would take me a few minutes, but users can of course trivially override this, although I do expect that it would catch most of them. |
|
| Back to top |
|
|
PeterHolland
Global Moderator
Joined: 27 Oct 2009
Posts: 2481
Location: Netherlands, Amstelveen
|
|
|
|
Once again :
z/OS V1R10.0 JES2 Initialization and Tuning Guide
SA22-7532-08
Chapter : Providing security for JES2
Subchapter : Controlling input to your system |
|
| Back to top |
|
|
nevilh
Active User
Joined: 01 Sep 2006
Posts: 262
|
|
|
|
| If you just wish to stop people submitting jobs with "incorrect" jobnames/jobcards from tso. By far the easiest way is installing the TSO submit exit (IKJEFF10) |
|
| Back to top |
|
|
PeterHolland
Global Moderator
Joined: 27 Oct 2009
Posts: 2481
Location: Netherlands, Amstelveen
|
|
|
|
Hello nevilh,
thought that IKJEFLD was used for the TSO logon/logoff process. |
|
| Back to top |
|
|
nevilh
Active User
Joined: 01 Sep 2006
Posts: 262
|
|
|
|
| Quote: |
| thought that IKJEFLD was used for the TSO logon/logoff process. |
It is . I had a typo in, you were obviously writing as I was correcting.. Thanks for trying to keep me honest |
|
| Back to top |
|
|
|
|
