Re: Change of Ownership for a Job

[Lizette Koehler]

Cross Posting to JES2 RACF and IBM-Main

Jags,

If you look - you have a JOBCARD. You can put the assignment of the owner
in there

1 //IMS11M41 JOB ACCT#,
// 'SAGAR',
// CLASS=A,
// MSGCLASS=H,MSGLEVEL=(1,1),
// NOTIFY=IBMUSER,
// REGION=64M


Lizette


> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:IBM-...@bama.ua.edu] On
Behalf Of
> jagadishan perumal
> Sent: Thursday, February 16, 2012 7:41 AM
> To: IBM-...@bama.ua.edu
> Subject: Re: Change of Ownership for a Job
>
> Hello Lizette,
>
> Z/OS : 1.13
> IMS : 11.1
> SECURITY product : RACF 1.13
>
> IMS11M41 JOB07743 IBMUSER 9 EXECUTION A DEV1 = >
> Needs to be changed to other Owner
> IMS11F41 JOB07744 IBMUSER 9 EXECUTION A DEV1 = >
> Needs to be changed to other Owner
> IMS11CR4 STC07738 IMSUSER 15 EXECUTION DEV1 DEV1
> IMS11RC4 STC07739 IMSUSER 15 EXECUTION DEV1 DEV1
> IMS11SCI STC07740 IMSUSER 15 EXECUTION DEV1 DEV1
> IMS11OM1 STC07741 IMSUSER 15 EXECUTION DEV1 DEV1
>
>
> IMS11M41
> JESMSGLG:
> IMS11M41
> 17.43.21 JOB07224 ---- WEDNESDAY, 15 FEB 2012 ----
>
> 17.43.21 JOB07224 IRR010I USERID IBMUSER IS ASSIGNED TO THIS JOB.
>
> 17.43.21 JOB07224 IRR011I SECLABEL SYSHIGH IS ASSIGNED TO THIS JOB.
>
> 17.43.22 JOB07224 ICH70001I IBMUSER LAST ACCESS AT 17:43:21 ON
WEDNESDAY,
> FEBR
> 17.43.22 JOB07224 $HASP373 IMS11M41 STARTED - INIT 2 - CLASS A - SYS
> DEV1
> 17.43.23 JOB07224 +DFS0578I - READ SUCCESSFUL FOR DDNAME PROCLIB MEMBER
> = DFSI
> 11.12.45 JOB07224 ---- THURSDAY, 16 FEB 2012 ----
>
> 11.12.45 JOB07224 $HASP395 IMS11M41 ENDED
>
> ------ JES2 JOB STATISTICS ------
>
> 15 FEB 2012 JOB EXECUTION DATE
>
> 59 CARDS READ
>
> 127 SYSOUT PRINT RECORDS
>
> 0 SYSOUT PUNCH RECORDS
>
> 8 SYSOUT SPOOL KBYTES
>
>
> JESJCL :
>
> IMS11M41
> 17.43.21 JOB07224 ---- WEDNESDAY, 15 FEB 2012 ----
>
> 17.43.21 JOB07224 IRR010I USERID IBMUSER IS ASSIGNED TO THIS JOB.
>
> 17.43.21 JOB07224 IRR011I SECLABEL SYSHIGH IS ASSIGNED TO THIS JOB.
>
> 17.43.22 JOB07224 ICH70001I IBMUSER LAST ACCESS AT 17:43:21 ON
WEDNESDAY,
> FEBR
> 17.43.22 JOB07224 $HASP373 IMS11M41 STARTED - INIT 2 - CLASS A - SYS
> DEV1
> 17.43.23 JOB07224 +DFS0578I - READ SUCCESSFUL FOR DDNAME PROCLIB MEMBER
> = DFSI
> 11.12.45 JOB07224 ---- THURSDAY, 16 FEB 2012 ----
>
> 11.12.45 JOB07224 $HASP395 IMS11M41 ENDED
>
> ------ JES2 JOB STATISTICS ------
>
> 15 FEB 2012 JOB EXECUTION DATE
>
> 59 CARDS READ
>
> 127 SYSOUT PRINT RECORDS
>
> 0 SYSOUT PUNCH RECORDS
>
> 8 SYSOUT SPOOL KBYTES
>
> 1 //IMS11M41 JOB ACCT#,
> // 'SAGAR',
> // CLASS=A,
> // MSGCLASS=H,MSGLEVEL=(1,1),
> // NOTIFY=IBMUSER,
> // REGION=64M
> //*
> /*JOBPARM PROCLIB=PROC99
> //*
> //*
> //********************************************************************
> //* IVP IMS 11.1
> //*
> //* SKELETON: DFSIXS92
> //*
> //* FUNCTION: IMBED - EXECUTION JOB FOR MPP #1 - IVP4
> 2 //IMS11M41 EXEC PROC=DFSMPR,TIME=(1440),
> // NBA=6,
> // OBA=5,
> // SOUT='*', SYSOUT CLASS
> // CL1=001, TRANSACTION CLASS 1
> // CL2=000, TRANSACTION CLASS 2
> // CL3=000, TRANSACTION CLASS 3
> // CL4=000, TRANSACTION CLASS 4
> // TLIM=10, MPR TERMINATION LIMIT
> // SOD=, SPIN-OFF DUMP CLASS
> // IMSID=IMS1, IMSID OF IMS CONTROL REGION
> // PREINIT=DC, PROCLIB DFSINTXX MEMBER
> // PWFI=Y PSEUDO=WFI
> 3 XX PROC SOUT=A,RGN=512K,SYS2=,
> XX CL1=001,CL2=000,CL3=000,CL4=000,
> XX OPT=N,OVLA=0,SPIE=0,VALCK=0,TLIM=00,
> XX PCB=000,PRLD=,STIMER=,SOD=,DBLDL=,
> XX NBA=,OBA=,IMSID=,AGN=,VSFX=,VFREE=,
> XX SSM=,PREINIT=,ALTID=,PWFI=N,
> XX APARM=,LOCKMAX=,APPLFE=,
> XX ENVIRON=,JVMOPMAS=
> XX*
> 4 XXREGION EXEC PGM=DFSRRC00,REGION=&RGN,
> XX TIME=1440,DPRTY=(12,0),
> XX PARM=(MSG,&CL1&CL2&CL3&CL4,
> XX &OPT&OVLA&SPIE&VALCK&TLIM&PCB,
> XX &PRLD,&STIMER,&SOD,&DBLDL,&NBA,
> XX &OBA,&IMSID,&AGN,&VSFX,&VFREE,
> XX &SSM,&PREINIT,&ALTID,&PWFI,
> XX '&APARM',&LOCKMAX,&APPLFE,
> XX &ENVIRON,&JVMOPMAS)
> XX*
> IEFC653I SUBSTITUTION JCL - PGM=DFSRRC00,REGION=512K,TIME=1440,DPRTY=(
> ,,,6,5,IMS1,,,,,DC,,Y,'',,,,)
> 5 XXSTEPLIB DD DSN=IMSEXE11.&SYS2.PGMLIB,DISP=SHR
> IEFC653I SUBSTITUTION JCL - DSN=IMSEXE11.PGMLIB,DISP=SHR
> 6 XX DD DSN=IMS1110.&SYS2.SDFSRESL,DISP=SHR
> IEFC653I SUBSTITUTION JCL - DSN=IMS1110.SDFSRESL,DISP=SHR
> 7 XXPROCLIB DD DSN=IMS1110.&SYS2.PROCLIB,DISP=SHR
> IEFC653I SUBSTITUTION JCL - DSN=IMS1110.PROCLIB,DISP=SHR
> 8 XXSYSUDUMP DD SYSOUT=&SOUT,
> XX DCB=(LRECL=121,BLKSIZE=3129,RECFM=VBA),
> XX SPACE=(125,(2500,100),RLSE,,ROUND)
> //*
> //* OVERRIDE PROC DD STATEMENTS
> //*
> //* --NONE--
> //*
> //* ADDITIONAL DD STATEMENTS
> //*
> IEFC653I SUBSTITUTION JCL - SYSOUT=*,DCB=(LRECL=121,BLKSIZE=3129,RECFM
> 9 //DFSSTAT DD SYSOUT=*
> //*
>
> JESSYSMSG :
> O. MESSAGE
>
> 2 IEFC001I PROCEDURE DFSMPR WAS EXPANDED USING SYSTEM LIBRARY
> IMS1110.PROCLIB
>
> One thing I found IBMUSER reads a proclib called MEMBER = DFSINTDC :
>
> Member DFSINTDC has just IEFBR14 coded.
>
> Jags
>
>
>
>
> On Thu, Feb 16, 2012 at 6:04 PM, Lizette Koehler
<star...@mindspring.com>wrote:
>
> > >
> > > Hello,
> > >
> > > Recently we have installed a IMS system. We have a requirement of
> > changing
> > all the
> > > started task userid for which I was able to do it easily, but there
> > > are
> > some Jobs which
> > > generates automatically when the IMS region starts up for which the
> > > OWNER
> > for the
> > > JOB is IBMUSER.
> > >
> > > Is it possible to change the Ownership of the IMS batch Jobs which
> > > starts
> > automatically
> > > when IMS region is Bounced.
> > >
> > > Regards,
> > > Jags
> >
> > Jags,
> > What version of z/OS, IMS and what SAF (ACF2, RACF, or Top Secret)?
> >
> > Could you provide a sample of a generated job? What Owner is it
> > getting when it is submitted?
> >
> > You SAF product should be able to assign and owner. If not, then you
> > may need to code an exit. I think that the owner is assigned at
> > submission, so there are a couple of places this could be done.
> >
> > Lizette
> >
> > ----------------------------------------------------------------------
> > For IBM-MAIN subscribe / signoff / archive access instructions, send
> > email to list...@bama.ua.edu with the message: INFO IBM-MAIN
> >
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
to
> list...@bama.ua.edu with the message: INFO IBM-MAIN

[Wilco Boschman]

Hello all,

The standard rule is that the job gets the userid of the submitter. You
can change that using a (in RACF terms) SURROGAT userid. The userid can
be a standard userid of your choosing (a protected userid might be a
good idea). Further you create a profile in the (RACF) SURROGAT class,
in the form of:

USERID.* (userid which the joib should use)

and authorize the submitter's userid with READ to the profile. Now the
submitter can use the SURROGAT userid without knowing it's password. Now
you should put the surrogat's userid int the jobcard:

//IMSregJB JOB,ACCT,bla bla,
// USER=<surrogat's userid>,
// rest of the jobcard

This way you can securely control which submitter (user) can user which
userid's without having to specivy password's in a clear-text database
(where the jobs come from)

hope this helps

Wilco Boschman

Op 16-02-12 13:48, Lizette Koehler schreef: