Security Verification error on TSO delete of alias

[William Besnier]

Hello all,

Need a little help. I have an OS/390 r2.9 shop, just installed with Security
Server converted from TopSecret and have a small problem.

When using TSO command line to DELETE an alias, I get the following;

IDC3018I SECURITY VERIFICATION FAILED+
IDC0551I ** ENTRY YYYYYY NOT DELETED
IDC0014I LASTCC=8IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS
IGG0CLFT-36

if I submit the command via IDCAMS batch jobstream, it works.

I have not experienced or had reported any other problems with TSO command
line process. Any suggestions?

TIA

----------------------------------------------------------------------
For TSO-REXX subscribe / signoff / archive access instructions,
send email to LIST...@VM.MARIST.EDU with the message: INFO TSO-REXX

[Steve Neeland]

Here's what I run from the ISPF command line:

/* REXX */
/* */
/* DELETE AN ALIAS DEFINITION IN THE APPROPRIATE MVS CATALOG */
/* */

PARSE UPPER ARG $UID1 .

IF $UID1 = '' THEN DO

SAY 'PLEASE ENTER USERID TO DELETE A TSO ALIAS FOR:'
PULL UPPER $UID1 .
IF $UID1 = '' THEN DO
SAY 'NO ALIAS ENTERED. EXITING.'
EXIT
END
END /* IF $UID1.... */

IF $UID1 ¬= '' THEN DO
"DELETE'" $UID1 "'ALIAS"

IF RC = 0 THEN SAY 'ALIAS FOR' $UID1 'DELETED SUCCESSFULLY'
ELSE SAY 'ALIAS FOR' $UID1 'UNSUCCESSFULLY DELETED'
END /* IF $UID1¬=... */

and to add a new alias:

/* REXX */
/* */
/* CREATE AN ALIAS DEFINITION IN THE APPROPRIATE MVS CATALOG */
/* */
/* */
PARSE UPPER ARG $UID .
IF $UID = '' THEN DO
CLEAR
SAY 'PLEASE ENTER USERID TO CREATE A TSO ALIAS FOR:'
PULL UPPER $UID
IF $UID = '' THEN DO
SAY 'NO ALIAS ENTERED. EXITING.'
EXIT
END /* IF UID = '' */
END /* IF $UID.... */

/* ******************************************************* */
/* */
/* */
/* ******************************************************* */
/* */
SAY 'CREATING TSO ALIAS....'
"DEFINE ALIAS(NAME('"||$UID||"')",
" RELATE('CATALOG.TSOUSER.VTSO001'))"
$RC = RC

/***********************/
DONE:
/***********************/

IF $RC = 0 THEN SAY 'ALIAS FOR' $UID 'CREATED SUCCESSFULLY'
ELSE SAY 'ALIAS FOR' $UID 'UNSUCCESSFULLY CREATED'
EXIT

[Itschak Mugzach]

You need to have the idcams (TSO) del command to be defined in your IKJTSOxx
parmlib member. You can activate it dynamically by the parmlib command (see
detail at tso system programming commands manual, Chapter 2).

Itschak Mugzach, Manager
Large systems support (OS/390)
ISRACARD (Mastercard) Ltd

[Dale Miller]

William,

Have your security admin add the following RACF definition in the FACILITY
class and give you READ access.

STGADMIN.IGG.DEFDEL.UALIAS

It will give you the access you need without giving you update access to
the master catalog.

Dale
____________________
Dale H. Miller
Information Security
Florida Power & Light
305-552-3442
Dale_H...@fpl.com
-------------------------------------------------

From: William Besnier [mailto:bbes...@WORLDNET.ATT.NET]
Sent: Saturday, August 11, 2001 6:13 PM
To: TSO-...@VM.MARIST.EDU
Subject: Security Verification error on TSO delete of alias

Hello all,

Need a little help. I have an OS/390 r2.9 shop, just installed with =

Security
Server converted from TopSecret and have a small problem.

When using TSO command line to DELETE an alias, I get the following;

IDC3018I SECURITY VERIFICATION FAILED+
IDC0551I ** ENTRY YYYYYY NOT DELETED

IDC0014I LASTCC=3D8IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON =
CODE IS
IGG0CLFT-36

if I submit the command via IDCAMS batch jobstream, it works.

I have not experienced or had reported any other problems with TSO =

[Stephen E. Bacher]

William Besnier [mailto:bbes...@WORLDNET.ATT.NET] wrote:

>When using TSO command line to DELETE an alias, I get the following;
>
>IDC3018I SECURITY VERIFICATION FAILED+
>IDC0551I ** ENTRY YYYYYY NOT DELETED

>IDC0014I LASTCC=8IDC3009I ** VSAM CATALOG RETURN CODE IS 56 - REASON CODE IS

>IGG0CLFT-36
>
>if I submit the command via IDCAMS batch jobstream, it works.
>

>I have not experienced or had reported any other problems with TSO command
>line process. Any suggestions?

Running IDCAMS (in batch or foreground) doesn't qualify unquoted names.
Running TSO does. Did you try fully quoting the name? Was your command
something like

DELETE YOURID.SOME.NAME.OR.OTHER ALIAS

where YYYYYY was YOURID.SOME.NAME.OR.OTHER

?

Try

DELETE 'YOURID.SOME.NAME.OR.OTHER' ALIAS

maybe.

Doesn't seem likely, though: I'd expect the reverse problem, where
the IDCAMS was the one that failed.

Steve Neeland <Steve....@americawest.com> wrote:

>Here's what I run from the ISPF command line:

[...]

> IF $UID1 = '' THEN DO
>
> SAY 'PLEASE ENTER USERID TO DELETE A TSO ALIAS FOR:'
> PULL UPPER $UID1 .

This line will put the userid in variable "UPPER", and nulls, or
extra junk entered by the user, in variable "$UID1." Have you
tested this path? Try

PARSE UPPER PULL $UID1 .

or just

PULL $UID1 .

which will do the same thing.

[...]

> "DELETE'" $UID1 "'ALIAS"

This will generate an invalid command, if presented as written,
since there are no spaces between the single quotes and the
words "DELETE" and "ALIAS".

> PULL UPPER $UID

See comments above.

- seb