IBM Security Z Security

 View Only
  • 1.  C4R916E Interrupting TSO SYSTSPRT Output

    IBM Champion
    Posted Sun November 29, 2020 11:56 AM
    Greetings all,

    We have been executing sets of RACF commands in TSO batch. If there is an error in one of the commands, for example a PERMIT with an invalid profile that generates an "ICH06004I profile NOT DEFINED TO RACF", the RACF message is immediately followed by a zSecure message "C4R916E Main RACF command failed, processing terminated". No further SYSTSPRT output is generated even though the remainder of the commands in the batch are executed. This is a major problem as we don't know which of the remaining commands succeeded and failed without inspecting each profile modified past the failing command. Is this WAD or a flaw?

    Regards, Bob

    ------------------------------
    Robert Hansel
    ------------------------------


  • 2.  RE: C4R916E Interrupting TSO SYSTSPRT Output

    Posted Mon November 30, 2020 01:08 AM
    Bob, 
    Could you give an example of what your JCL looks like when you run commands like this?  Are you in some special environment?

    I run commands thru batch jobs all the time and have zero problems with them, and don't get that Main RACF command failed... message at all.

    my JCL looks something like this:
    //TSOBATCH JOB (ACCT),'MYNAME',MSGCLASS=Z,NOTIFY=&SYSUID,REGION=0M
    //* THIS WILL EXECUTE WHATEVER TSO COMMANDS ARE LISTED UNDER DD SYSTSIN
    //TSO EXEC PGM=IKJEFT01,REGION=0M,TIME=1440,DYNAMNBR=99
    //SYSPROC DD DSN=MY.CLIST,DISP=SHR
    //SYSEXEC DD DSN=MY.EXEC,DISP=SHR
    //SYSTSPRT DD SYSOUT=*
    //SYSTSIN DD *
    LU MYRACFID
    /*

    ------------------------------
    Scott Tietjen CISSP
    ------------------------------



  • 3.  RE: C4R916E Interrupting TSO SYSTSPRT Output

    IBM Champion
    Posted Mon November 30, 2020 06:14 AM
    Scott,

    My JCL is the same except no SYSPROC or SYSEXEC DDs, SYSTSIN DD is a dataset, and SYSTSPRT DD is a temporary dataset.

    Bob

    ------------------------------
    Robert Hansel
    ------------------------------



  • 4.  RE: C4R916E Interrupting TSO SYSTSPRT Output

    Posted Mon November 30, 2020 09:13 AM

    This should not occur. Subsequent commands should continue to be executed and their output found in SYSTSPRT.

    Of course, if you are running IKJEFT1A/1B, the whole stream should stop, independent of what CV decides/does.

    You might want to contact support to find what's causing the issue.



    ------------------------------
    Guus Bonnes
    ------------------------------