Commands in a system without RACF: Method 1

In a system without RACF®, you can submit operator, storage administrator, and system programmer commands for batch processing by defining the HSENDCMD command to the terminal monitor program (TMP) as an authorized command and by providing a STEPLIB or JOBLIB card to an authorized program facility (APF) authorized version of module ARCMCMD.

To use method 1, do the following:

Instead of specifying USER=userid on the JOB card, add the HSENDCMD command to the authorized commands table in TMP so that this command can be invoked and submitted to DFSMShsm as an acceptable, authorized command.
Modify the CSECT IKJEFTE2 within the IKJEFT02 load module to indicate that HSENDCMD is an authorized command and should be attached with APF authorization.
- Make this modification to the first entry in IKJEFTE2 that contains eight blanks, and ensure that one blank entry remains in the authorized command table to indicate the end of the table.
- In the z/OS TSO/E Customization, the authorized command table has been moved to a CSECT in a separate load module named IKJTABLS. The IKJTABLS load module is located in the SYS1.LPALIB.
Link-edit the DFSMShsm module ARCMCMD (the HSENDCMD command processor) into an APF-authorized library as an authorized program.
Ensure that the job submitting the HSENDCMD command uses a STEPLIB or JOBLIB card to this library.
Restrict access to this APF library to prevent unauthorized use of the HSENDCMD command.

The system programmer is responsible for ensuring that any DFSMShsm maintenance to module ARCMCMD is also applied to the authorized copy of ARCMCMD. All concatenated STEPLIBs must be authorized. The APF library name must appear either in the system LINKLIST or in the appropriate IEAAPFxx of the SYS1.PARMLIB. (The IEAAPFxx member is used to identify program libraries that require APF authorization). See z/OS MVS Initialization and Tuning Guide for more information about the IEAAPFxx member.

The following job step link-edits the ARCMCMD module to create an authorized copy of ARCMCMD:

   //LINKED  EXEC PGM=IEWL,PARM='LIST,LET,NCAL,XREF,RENT,REUS'
   //SYSPRINT DD  SYSOUT=A
   //SYSUT1   DD  UNIT=SYSDA,SPACE=(CYL,(1,1))
   //SYSLMOD  DD  DISP=SHR,DSN=DFHSM.AUTHLIB
   //IN       DD  DISP=SHR,DSN=SYS1.CMDLIB
   //SYSLIN   DD  *
    INCLUDE IN HSENDCMD
    SETCODE AC(1)
    ENTRY ARCMCMD
    NAME HSENDCMD(R)
   /*

The successful execution of this link-edit results in message IEW0461 for ARCWTU2 and ARCCVT.