Posted: Thu Aug 26, 2004 3:21 pm Post subject: Calling MQ RACF Wizards
Partisan
Joined: 27 Jan 2002 Posts: 347
Seeing something strange. A new application deployed using IMS MPRs sending msgs to MQMs on windows (MQPUT1). Some of these IMS trans came in through ISC links (from CICS or other IMS’s). We were receiving some RACF errors, so as a circumvention to stop bleeding, I had the RACF group put RESLEVEL with CONTROL acess (MQADMIN) in for userids for MPR’s and IMS CNTL region userid’s. Making it CONTROL should have made it NO CHECK for any RACF rules for OBJECTs. I had them recycle MPR’s but NOT the IMS CNTL region. That seemed to stop the majority of RACF errors. But, we were still receiving:
IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND.
ICH408I USER(xxxxxxx ) GROUP( ) NAME(??? )
The application said these were coming from ISC based IMS transactions doing MQPUT. Ended up having to make the MPR’s RACF TRUSTED and recyle MPRs to fix every problem.
Has anyone seen this before? Do ISC links or the IMS CNTL region needed to be stopped and restarted to pick up the RESLEVEL change to make it NO CHECK?
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum