Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND

687 views
Skip to first unread message

Mohammed Imam

unread,
Feb 20, 2013, 8:23:00 AM2/20/13
to

Hi,

This morning, after IPL in test system, none of my CICS regions would come up due to security failure. The message is:

F2 0090 IRR012I  VERIFICATION FAILED. USER PROFILE NOT FOUND.               

F2 0091 DFHXS1104 CICS1                                                     

        Default security could not be established for userid CICSUSER. The  

        security domain cannot continue, so CICS is terminated. SAF codes are

        (X'00000004',X'00000000'). ESM codes are (X'00000004',X'00000000'). 

Can someone suggest me how to get around with it.

Thanks,

Mohammed A. Imam

County of Cumberland, NC

(910) 678-7680.

All correspondence to and from this address may be subject to the N.C. Public Records Law and may be disclosed to third parties.

Frank M. Ramaekers

unread,
Feb 20, 2013, 8:59:22 AM2/20/13
to

Have a $IPL with SEC=NO?

 

Frank M. Ramaekers Jr.

_____________________________________________________ This message contains information which is privileged and confidential and is solely for the use of the intended recipient. If you are not the intended recipient, be aware that any review, disclosure, copying, distribution, or use of the contents of this message is strictly prohibited. If you have received this in error, please destroy it immediately and notify us at Priva...@ailife.com.

Mohammed Imam

unread,
Feb 20, 2013, 9:02:27 AM2/20/13
to

I was first trying to VERIFY the security files. If it is successful the security will start. If it is not possible I’ll do that.

 

Mohammed A. Imam

Mohammed Imam

unread,
Feb 20, 2013, 9:46:23 AM2/20/13
to

Frank,

I IPLed with SEC=NO. The status remains same. CICS doesn’t come up for the same reason as before when security was on.

 

Mohammed A. Imam

Max Singley

unread,
Feb 20, 2013, 11:29:22 AM2/20/13
to
Here's an old one:

// JOB USERADD THIS JOB WILL ADD A NEW USER TO CICS.
* IBM SILLINESS REQUIRES A CONTINUOUS 20 CHARS FOR PGMID
// OPTION NOLOG
// DLBL IESCNTL,'VSE.CONTROL.FILE',,VSAM,CAT=VSESPUC
*
// EXEC PROC=DTRICCF
// EXEC IESUPDCF,SIZE=64K
*
* ====> SUPPLY AN OPERAND FOR THE ICCF PARAMETER (SEE 2.)
ICCF=NO
*
* BE SURE TO CHANGE NEWPASS TO MATCH VTUBES PASSWORD
* CHANGE SAMPUSER TO A USER ID SIMILIAR TO THE ONE BEING ADDED
* ====> NEW USERID, PASSWORD, AND USERID TO COPY FROM. OPERATOR IS OPID
ADD LEROY,ROYLE,SAMPUSER,DAYS=0,REVOKE=0,-
PGMID=LEROY_E._JONES,OPERATOR=029
/*
// IF $RC=0 THEN
// GOTO SETGROUP
// IF $RC=4 THEN
// GOTO ERROR
// IF $RC>6 THEN
// GOTO END
/. SETGROUP
* ADD THE USER TO APPROPRIATE GROUPS
// EXEC BSTADMIN
CONNECT GROUP01 YOURUSER
CONNECT GROUP05 YOURUSER
CONNECT GROUP61 YOURUSER
PERFORM DATASPACE REFRESH
/*
// IF $RC=0 THEN
// GOTO STEPUPDL
// IF $RC=4 THEN
// GOTO ERROR
// IF $RC>6 THEN
// GOTO END
// LOG
* ===> JOB 'DTRUPD' CREATED, ENSURE THAT THIS JOB IS EXECUTED NEXT
// NOLOG
// IF $RC=2 THEN
// GOTO STEP2
/. ERROR
// LOG
* ===> ERRORS IN INPUT DATA, STATEMENT(S) FLAGGED IN LISTING
// NOLOG
/. STEPUPDL
*
* ====> DELETE BLOCK 'UPDPL', IF REQUIRED (SEE 4.)
* ************ BEGIN OF BLOCK 'UPDPL' *****************************
// EXEC PROC=IESUPDPL
/*
* ************ END OF BLOCK 'UPDPL' *******************************
/. END
/&

Max E. Singley
Technical Services Project Leader
Alex Lee, Inc.
Email: max.s...@alexlee.com <mailto:max.s...@alexlee.com> Tel: 828-725-4894
A responsive and reliable production environment doesn't just happen by accident.


________________________________

From: vse-l-bounces+max.singley=alexl...@lists.lehigh.edu [mailto:vse-l-bounces+max.singley=alexl...@lists.lehigh.edu] On Behalf Of Mohammed Imam
Sent: Wednesday, February 20, 2013 11:12 AM
To: VSE Discussion List
Subject: RE: IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND



With my finding I realized that the user id CICSUSER has been missing. There is no issue with the security.



Does anyone have a batch job (IESUPDCF ) to ADD a user, readily available with relevant profiles for the user CICSUSER.



Thanks,

Mohammed A. Imam



From: vse-l-bounces+mimam=co.cumber...@lists.lehigh.edu [mailto:vse-l-bounces+mimam=co.cumber...@lists.lehigh.edu] On Behalf Of Kevin Corkery
Sent: Wednesday, February 20, 2013 9:47 AM
To: 'VSE Discussion List'
Subject: RE: IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND



This is auto-verification and the file should be usable and opened ... it's a warning only.



From: vse-l-bounces+kcorkery=live...@lists.lehigh.edu [mailto:vse-l-bounces+kcorkery=live...@lists.lehigh.edu] On Behalf Of Mohammed Imam
Sent: Wednesday, February 20, 2013 9:44 AM
To: VSE Discussion List
Subject: RE: IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND



No,

FB 0078 4228I FILE IESCNTL OPEN ERROR X'76'(118) CAT=VSESPUC

(OPND1-5 ) WARNING:FILE WAS NOT CLOSED ON A PREVIOUS OUTPUT-OPEN



Mohammed A. Imam



From: vse-l-bounces+mimam=co.cumber...@lists.lehigh.edu [mailto:vse-l-bounces+mimam=co.cumber...@lists.lehigh.edu] On Behalf Of Deetjen, Jean-Max
Sent: Wednesday, February 20, 2013 9:38 AM
To: VSE Discussion List
Subject: RE: IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND



Did your security partition come up properly, assuming FB and BSM.



<http://www.HibbertGroup.com>

The Hibbert Group <http://www.HibbertGroup.com>

Follow us on:

<http://www.facebook.com/?ref=logo#!/pages/The-Hibbert-Group/362428248137> <http://twitter.com/#!/HibbertGroup_> <http://www.linkedin.com/companies/the-hibbert-group>





This e-mail, including any attachments, is intended for the use of the person to whom it is addressed and may contain information that is privileged and confidential. If the reader of this email is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this information is protected under the law and STRICTLY PROHIBITED. If you have received this e-mail message in error, please notify the sender and delete the related email and any attachments.



P Please consider the environment before printing this email. Thank you.



From: vse-l-bounces+jdeetjen=hibbertg...@lists.lehigh.edu [mailto:vse-l-bounces+jdeetjen=hibbertg...@lists.lehigh.edu] On Behalf Of Mohammed Imam
Sent: Wednesday, February 20, 2013 8:23 AM
To: VSE Discussion List
_______________________________________________
VSE-L mailing list
VS...@lists.lehigh.edu
https://lists.lehigh.edu/mailman/listinfo/vse-l

Max Singley

unread,
Feb 20, 2013, 11:36:58 AM2/20/13
to

You can also change the CICS JCL // ID to use another userid if you have a suitable one.

have fun,
Max

Mario Izaguirre

unread,
Feb 20, 2013, 12:12:45 PM2/20/13
to

Hi Mohammed.

 

The user CICSUSER has been deleted by some body or something … !!!!

 

IESADMUPL2                  MAINTAIN USER PROFILES                          

VSE CONTROL FILE                                                            

START.... ________                                                          

OPTIONS:   1 = ADD             2 = CHANGE              5 = DELETE           

                       PASSWORD     REVOKE  USER INITIAL  NAME              

   OPT    USERID      VALID UNTIL    DATE   TYPE  NAME    TYPE              

                                                                             

    _     $SRV         01/01/97 *            2   IESERSUP  2                

    _     CICSGEN      04/12/12 *            3   DFLESEL   2                

    _     CICSUSER     01/01/97 *            3   DFLESEL   2                 

    _     CNSL         01/01/97 *            1   DUMMY     1                

    _     DBDCCICS                           1   DUMMY     1                

                                                                             

PF1=HELP                    3=END                               6=GROUPS    

PF7=BACKWARD   8=FORWARD    9=PRINT                                          

 

 

If you have VSE under VM, type the JCL from Max Sinley and submit the JCL from User CMS to VSE… (only if you have no active DBDCCICS.).

 

 

 

 

 

Regards.

 

Mario

 

 

Mohammed Imam

unread,
Feb 20, 2013, 1:49:00 PM2/20/13
to

I’ve standalone VSE. I can use VSE Navigator to submit job. However, security is the issue.

 

Mohammed A. Imam

 

From: vse-l-bounces+mimam=co.cumber...@lists.lehigh.edu [mailto:vse-l-bounces+mimam=co.cumber...@lists.lehigh.edu] On Behalf Of Mario Izaguirre


Sent: Wednesday, February 20, 2013 12:13 PM
To: VSE Discussion List

Mohammed Imam

unread,
Feb 20, 2013, 1:54:19 PM2/20/13
to

What is wrong with the syntax hare:

 

        --- VSE/SP CONTROL FILE 'IESCNTL' OPENED FORUPDATE ---

02/20/13  BATCH USER PROFILE MAINTENANCE                -VSE/ESA BATCH USER PROFILE MAINTENANCE-                PAGE   2

 

 

        --- READ ICCF PARAMETER STATEMENT (ICCF=YES/NO/IGNORE) FROM SYSIPT ---

ICCF=NO

ADD CICSUSER,******,IMAM

/*        

        *** INVALID USER STATEMENT FOUND:  /*                            ***

 

 

        --- EXECUTION COMPLETED ---

 

 

 

Mohammed A. Imam

Max Singley

unread,
Feb 20, 2013, 2:08:13 PM2/20/13
to

My best guess is that the IMAM userid is an ICCF userid and you can't use it to create an 8 character userid as it is an ICCF userid since ICCF=NO is specified:

ADD If the model profile is for an ICCF user, then the ADD statement is ignored, and an error message is inserted into the listing. If the model profile is not for an ICCF user, the new user is added to the IESCNTL control file.

have fun,
Max
A responsive and reliable production environment doesn't just happen by accident.



________________________________

The user CICSUSER has been deleted by some body or something . !!!!



IESADMUPL2 MAINTAIN USER PROFILES

VSE CONTROL FILE

START.... ________

OPTIONS: 1 = ADD 2 = CHANGE 5 = DELETE

PASSWORD REVOKE USER INITIAL NAME

OPT USERID VALID UNTIL DATE TYPE NAME TYPE



_ $SRV 01/01/97 * 2 IESERSUP 2

_ CICSGEN 04/12/12 * 3 DFLESEL 2

_ CICSUSER 01/01/97 * 3 DFLESEL 2

_ CNSL 01/01/97 * 1 DUMMY 1

_ DBDCCICS 1 DUMMY 1



PF1=HELP 3=END 6=GROUPS

PF7=BACKWARD 8=FORWARD 9=PRINT





If you have VSE under VM, type the JCL from Max Sinley and submit the JCL from User CMS to VSE. (only if you have no active DBDCCICS.).











Regards.



Mario







De: vse-l-bounces+mizaguirre=circu...@lists.lehigh.edu [mailto:vse-l-bounces+mizaguirre=circu...@lists.lehigh.edu] En nombre de Mohammed Imam
Enviado el: miércoles, 20 de febrero de 2013 14:23
Para: VSE Discussion List
Asunto: IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND



Hi,

This morning, after IPL in test system, none of my CICS regions would come up due to security failure. The message is:

F2 0090 IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND.

F2 0091 DFHXS1104 CICS1

Default security could not be established for userid CICSUSER. The

security domain cannot continue, so CICS is terminated. SAF codes are

(X'00000004',X'00000000'). ESM codes are (X'00000004',X'00000000').

Can someone suggest me how to get around with it.

Thanks,

Mohammed A. Imam

County of Cumberland, NC

(910) 678-7680.

All correspondence to and from this address may be subject to the N.C. Public Records Law and may be disclosed to third parties.

All correspondence to and from this address may be subject to the N.C. Public Records Law and may be disclosed to third parties.

All correspondence to and from this address may be subject to the N.C. Public Records Law and may be disclosed to third parties.

Mohammed Imam

unread,
Feb 20, 2013, 2:17:46 PM2/20/13
to
Yes, I could figure it out. I could create the user id CICSUSER.
I am back up now.

Thanks for all your thoughts and suggestions.

Mohammed A. Imam

August....@avon.com

unread,
Feb 20, 2013, 2:28:13 PM2/20/13
to
maybe you should run a back up

Mohammed Imam

unread,
Feb 20, 2013, 2:31:29 PM2/20/13
to
I have a backup. The problem is that it was a VTAPE backup. Which couldn't be used because of security issues and none of the CICS could be brought up.

August....@avon.com

unread,
Feb 20, 2013, 2:45:00 PM2/20/13
to
I sent you a reply offline

EBER...@terra.es

unread,
Feb 21, 2013, 8:38:11 AM2/21/13
to
Mohammed:
 
You can overcome the situation by starting CICS with the SEC=NO override SIT parameter :
 
 // EXEC DFHSIP,SIZE=DFHSIP,PARM='APPLID=&XAPPLF2.,START=&XMODEF2.,EDSAL*
               IM=&ELIM.,SI',DSPACE=2M,OS390
SEC=NO,SIT=SP,STATRCD=OFF,MXT=20,
* $$ SLI MEM=DFH$SVEX.J,S=PRD1.BASE
/*
 
 
If you are using the original CICSICCF JCL, you can go to the /. RECO label  (which starts CICS with SEC=NO) into this JCL by setting the XSECP parameter on CPUVARn procedure to "RECOVERY":
 
// EXEC DTRSETP,PARM='CPUVAR&XNCPU;;SET XSECP=RECOVERY'
 
Best regards.
Eliseo Bertolin
 
VM//VSE  System Programmer
Barcelona (Spain)
 
 
 ----Mensaje original----
De: mi...@co.cumberland.nc.us
Fecha: 20/02/2013 14:22
Para: "VSE Discussion List"<vs...@lists.lehigh.edu>
Asunto: IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND

_______________________________________________ VSE-L mailing list VS...@lists.lehigh.edu https://lists.lehigh.edu/mailman/listinfo/vse-l

Gustavo Torres

unread,
Feb 21, 2013, 8:59:27 AM2/21/13
to
Mohammed,
 
You could to try VSEDIT, the full screen editor to use when you don't can start CICS, VTAM or POWER, and it is free, ;) 

On Thu, Feb 21, 2013 at 9:19 AM, Mohammed Imam <mi...@co.cumberland.nc.us> wrote:

Eliseo,

 

That was a viable solution for me to start CICS with SEC=NO. I wouldn’t have been able to change SIT, however, as I didn’t have any editor available.

 

Well, I am back up in good shape now.

Thanks for your thoughts.

 

Mohammed A. Imam.

Kevin Corkery

unread,
Feb 21, 2013, 9:04:55 AM2/21/13
to

Mohammed …

 

My CICS startup JCL includes a cancellation trap with a 10 second wait.  If the startup is cancelled at the wait the JCL goes to a point where I can provide SIT overrides.  If not cancelled within 10 seconds CICS starts normally.  This could be useful for such a situation.

 

 

Kevin P Corkery

Independent Consultant

Voorhees, New Jersey

 

 

 

From: vse-l-bounces+kcorkery=live...@lists.lehigh.edu [mailto:vse-l-bounces+kcorkery=live...@lists.lehigh.edu] On Behalf Of Mohammed Imam
Sent: Thursday, February 21, 2013 8:49 AM
To: EBER...@terra.es; VSE Discussion List
Subject: RE: IRR012I VERIFICATION FAILED. USER PROFILE NOT FOUND

 

Eliseo,

 

That was a viable solution for me to start CICS with SEC=NO. I wouldn’t have been able to change SIT, however, as I didn’t have any editor available.

 

Well, I am back up in good shape now.

Thanks for your thoughts.

 

Mohammed A. Imam.

 


Sent: Thursday, February 21, 2013 8:38 AM
To: vs...@lists.lehigh.edu

Paul L'Heureux

unread,
Feb 21, 2013, 10:34:19 AM2/21/13
to

Does anyone know when (during an install of VSE) the CICSUSER is created/defined?

 

What I am getting at is:

What IBM-supplied JCL creates the CICSUSER user definition?

 

Thanks,

 

Paul

 

 

Gustavo Torres

unread,
Feb 21, 2013, 10:57:47 AM2/21/13
to
I think it is created by "// EXEC IESICTL   INIT CONTROL FILE" into VSAMINIT job. 

Mario Izaguirre

unread,
Feb 21, 2013, 11:56:04 AM2/21/13
to

Hi Again..

 

Because not better, you write all your JCL  CICSICCF  tartup?

 

Is that it seems to me, that the user is wrong.

 

In my JCL, I have this:

 

 

LOG                                                                   

// ID USER=DBDCCICS,PWD=DBDCCI                                        

NOLOG                                                                 

// EXEC DTSANALS                       RECOVER IF DTSFILE DESTROYED   

RECOVER OPT                                                           

 

 

Also the user, you must have permission in BMS.

 

 

 

Regards.

 

 

Mario

 

 

 

De: vse-l-bounces+mizaguirre=circu...@lists.lehigh.edu [mailto:vse-l-bounces+mizaguirre=circu...@lists.lehigh.edu] En nombre de Mohammed Imam


Enviado el: miércoles, 20 de febrero de 2013 14:23
Para: VSE Discussion List

Mohammed Imam

unread,
Feb 21, 2013, 5:51:56 PM2/21/13
to

The “// ID” on CICS startup could be anyone who has access to run the CICS.

0 new messages