For some functions of zSecure Audit, program CKGRACF needs to be added to the AUTHPGM table of member IKJTSOxx in SYS1.PARMLIB.
Resolving the problem
Some functions of zSecure Audit need program CKGRACF to be included in the AUTHPGM table of programs in member IKJTSOxx of SYS1.PARMLIB .
One of the functions is Change Tracking, option AU.C from the main zSecure panel.
Without CKGRACF in the AUTHPGM table, SMF logging for Accepted, Rejected or Deferred changes does not take place.
The 1.10 version of the zSecure Suite: CARLa-Driven Components - Installation and Configuration Manual has the following text:
Updating TSO and ISPF command tables for Tivoli zSecure
To run the CKGRACF, the main program for Tivoli zSecure Admin from TSO and ISPF, update the TSO and ISPF command tables as described in the following sections
TSO command table
In order to be run authorized from TSO, CKGRACF must be included in the AUTHCMD authorized command table in SYS1.PARMLIB member IKJTSOxx, or the corresponding CSECTs IKJEFTE2, IKJEFTE8, IKJEFTAP, and IKJEFTNS. It can also be added safely to the AUTHPGM and AUTHTSF tables of the same member, though this is not required for the current version.
This will be changed in the next release of the manual, CKGRACF must be included in the AUTHCMD and in the AUTHPGM table of member IKJTSOxx.
|Security||Tivoli zSecure Audit for RACF||z/OS||1.10|
|Security||Tivoli zSecure Audit for ACF2||z/OS||1.10|
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.