|
View previous topic :: View next topic
|
| Author |
Message |
NJDevils28
New User
Joined: 11 Nov 2019
Posts: 10
Location: USA
|
|
|
|
My last question was deleted for some reason. So I guess I guess I'll try again a little differently.
My company has the use of a mainframe but no support for it. The only support employee we had, resigned.
I am the last resort only because I know TSO and I have limited mainframe knowledge.
Before he left, he provided me with Console access and the script to IPL the system. That's it.
I now have to learn, on my own, everything else.
One thing has come up and I do not know how to fix, users are losing TSO access for one reason or another and I do not know how to restore the access.
Does anyone know the console command to check a user id? How to reactivate it? how to assign one? How to elevate authority or take it away? I've been googling, but as you can see, I have not been successful.
Any help is appreciated? |
|
| Back to top |
|
 |
sergeyken
Senior Member
Joined: 29 Apr 2008
Posts: 2023
Location: USA
|
|
|
|
At your level of mainframe knowledge the best solution would be: keep as far away from the computer as possible.
The best of all is that it is not a nuclear bomb you are supposed to maintain... |
|
| Back to top |
|
|
NJDevils28
New User
Joined: 11 Nov 2019
Posts: 10
Location: USA
|
|
|
|
| sergeyken wrote: |
At your level of mainframe knowledge the best solution would be: keep as far away from the computer as possible.
The best of all is that it is not a nuclear bomb you are supposed to maintain... |
I wholeheartedly agree with everything you said. I however have little choice in the matter until they hire a new SysAdmin.
Aside from cloning ID's in RACF, is there another possible script? I see the current users have many libraries and CLIST assigned to them. Can i just copy and rename those libs?
I don't just want to swing a bat at every pitch and make things worse.
-Ron |
|
| Back to top |
|
|
Robert Sample
Global Moderator
Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA
|
|
|
|
| Quote: |
| Does anyone know the console command to check a user id? How to reactivate it? how to assign one? How to elevate authority or take it away? I've been googling, but as you can see, I have not been successful. |
These questions are not answerable in terms on the console. What security product does your site use (the main ones are IBM's RACF, CA TOP SECRET, CA ACF2)? With RACF, you sign onto a TSO session and issue the command LU (userid) from a READY prompt (or if in ISPF, TSO LU (userid) will do it). Depending upon how your site is set up, there may be an ISPF option to access the security product, which simplifies making changes and displaying data. For whichever product your site uses, you need to find the manuals and read up on the product as they tend to be very complex and it is easy to inadvertently lock yourself out of the system. RACF, for example, controls not just TSO user ids but also access to data sets and various other system facilities. |
|
| Back to top |
|
|
Pete Wilson
Active Member
Joined: 31 Dec 2009
Posts: 581
Location: London
|
|
|
|
This seems a bizarre situation for your company to have put itself in. Obviously the person who resigned had good reason to. Has the company even tried to replace that person, even with temporary contractors? If not why not?! If they have but no one wanted the job then that says a lot.
A mainframe is an expensive investment and even more so if it's not being properly exploited. What kind of applications run on it...are they critical to the company?
If people are losing TSO access it sounds like the access was set to expire after a certain period.
If you know what datasets the person who resigned used you may find some of the scripts or jobs that they used to administer the system and access etc. But really you'll be running blind with all this and there's a real danger you could do irreparable damage.
Your company really needs to stump up with some money to get some experienced support. |
|
| Back to top |
|
|
|
|
