Page 1 of 1

IKJ56420I Userid ELBAEK not authorized to use TSO

PostPosted: Thu 26 Mar 2015, 21:41
by jens.elbaek
I continue to get the message: IKJ56420I Userid ELBAEK not authorized to use TSO although I have resumed my userid.
Why? Is there anything I can do?

Re: IKJ56420I Userid ELBAEK not authorized to use TSO

PostPosted: Thu 26 Mar 2015, 22:24
by prino
You've caused RACF violations on USS. It would be OK for me to see you reinstated, but I'm not in a position to do so. If any of the other admins reads this, they may do something, or not...

Re: IKJ56420I Userid ELBAEK not authorized to use TSO

PostPosted: Thu 26 Mar 2015, 23:02
by jens.elbaek
Ohh, I see. I was looking for the installation of JZOS which I could not find. I hope you will resume my userid.

Re: IKJ56420I Userid ELBAEK not authorized to use TSO

PostPosted: Fri 27 Mar 2015, 00:30
by steve-myers
Code: Select all
ICH408I USER(ELBAEK  ) GROUP(USERG02 ) NAME(JENS ELBAEK         ) 260
  ./ferlan CL(DIRACC  ) FID(01C6C1D5F0F0F2000F1A0002801D0000)       
  INSUFFICIENT AUTHORITY TO OPENDIR                                 
  ACCESS INTENT(R--)  ACCESS ALLOWED(OTHER      --X)                 
  EFFECTIVE UID(0000065869)  EFFECTIVE GID(0000000002)
If I read that correctly, you were looking for another user's files. Why ever did you think you would find some sort of system product mixed in with another user's files?

The other two RACF messages reflect personal files of 2 other users.

Some how I think you are trying to mislead the admins.

Re: IKJ56420I Userid ELBAEK not authorized to use TSO

PostPosted: Fri 27 Mar 2015, 11:57
by jens.elbaek
:oops: I did a search in OMVS for JZOS. I used "find /. -name JZOS" as far as I remember. I DID NOT use another userid, I would never do that. I have 40 years experience and know that RACF logs all attempts to violate authorization. I am not aware of any other attempt to violate RACF authorization. I hope you understand.

Re: IKJ56420I Userid ELBAEK not authorized to use TSO

PostPosted: Fri 27 Mar 2015, 12:12
by prino
jens.elbaek wrote::oops: I did a search in OMVS for JZOS. I used "find /. -name JZOS" as far as I remember. I DID NOT use another userid, I would never do that. I have 40 years experience and know that RACF logs all attempts to violate authorization. I am not aware of any other attempt to violate RACF authorization. I hope you understand.

This is probably the same kind of mistake we've seen in the past when users did a SRCHFOR on a 3.4 list generated by a dslist command with an '*' as HLQ.

I cannot confirm this, but if you PM me what you did and how you did it, I can forward that to another admin who can try it out with a userid that has the same RACF status as yours - do not post it in this open forum!