Got DSN3107I FROM REXX CONSOLE SYSCMD command

ying yan

Got DSN3107I FROM REXX CONSOLE SYSCMD command
Hi all,
I use REXX to inquire DB2 BUFFERPOOL detail status.I use
CONSPROF / CONSOLES / CONSOLE SYSCMD command to get
the info.But I can only get msg DSN3107I.
"DSN3107I -xxxx DSN3EC0X -COMMAND REJECT.REQUESTOR NOT
AUTHORIZED".
I have another REXX work like that to gather system info
(like'D IPLINFO') can work good.
IBMBOOK said:the CSECT DSN3EC0X has discovered that the source of the
command was a console that does not have 'system' authority.
How can i have the system authorize?Did anyone do job like that?
Thanks a lot for help.

YY

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

James Campbell

Re: Got DSN3107I FROM REXX CONSOLE SYSCMD command
(in response to ying yan)
Read the DB2 Command Reference for display bufferpool. It has a section detailing the
authorisation required. It is **your** user-id that needs this authorisation, since it is the one
issuing the command.

James Campbell

On 10 Jan 2008 at 7:57, Yan Ying wrote:

> Hi all,
> I use REXX to inquire DB2 BUFFERPOOL detail status.I use
> CONSPROF / CONSOLES / CONSOLE SYSCMD command to get
> the info.But I can only get msg DSN3107I.
> "DSN3107I -xxxx DSN3EC0X -COMMAND REJECT.REQUESTOR NOT
> AUTHORIZED".
> I have another REXX work like that to gather system info
> (like'D IPLINFO') can work good.
> IBMBOOK said:the CSECT DSN3EC0X has discovered that the source of the
> command was a console that does not have 'system' authority.
> How can i have the system authorize?Did anyone do job like that?
> Thanks a lot for help.
>
> YY
>
> The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

ying yan

Re: Got DSN3107I FROM REXX CONSOLE SYSCMD command
(in response to James Campbell)
Thanks James.
I can use the display bufferpool command in SD.LOG.It's
the console didn't have the authorize.But I can send other
system command like 'D XCF'.I don't know how to make the
console have appropriate auhorize.

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

Christopher Tee

Re: Got DSN3107I FROM REXX CONSOLE SYSCMD command
(in response to ying yan)
Yan Ying

The userid, or a RACF group it's connected to, requires
OPERPARM(AUTH(SYS)) (assuming you're using RACF, TopSecret and ACF2
probably have something similar)

Chris Tee
DB2 Systems Programmer
Database Team
SSO IGA Technical Services
Internal Tel: 250072 External Tel: 023 9256 0072



Yan Ying <[login to unmask email]>
Sent by: DB2 Data Base Discussion List <[login to unmask email]>
10/01/2008 10:16
Please respond to
DB2 Database Discussion list at IDUG <[login to unmask email]>


To
[login to unmask email]
cc

Subject
Re: [DB2-L] Got DSN3107I FROM REXX CONSOLE SYSCMD command






Thanks James.
I can use the display bufferpool command in SD.LOG.It's
the console didn't have the authorize.But I can send other
system command like 'D XCF'.I don't know how to make the
console have appropriate auhorize.

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L
list archives, the FAQ, and delivery preferences are at
http://www.idug.org/lsidug under the Listserv tab. While at the site, you
can also access the IDUG Online Learning Center, Tech Library and Code
Place, see the latest IDUG conference information, and much more. If you
have not yet signed up for Basic Membership in IDUG, available at no cost,
click on Member Services at http://www.idug.org/lsms







Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number
741598.
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU






The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

James Campbell

Re: Got DSN3107I FROM REXX CONSOLE SYSCMD command
(in response to Christopher Tee)
"DB2 commands issued from an MVS console are not associated with any secondary
authorization IDs."

So my guess is that you are using a secondary auth-id to issue the command under SDSF,
which is not being recognised when using a console. And, yes, they do use different
interfaces.

What to do? Well, you could:
- arrange for your own user-id to have the appropriate authority - it is only a DISPLAY privilige
you need.
- use the DSNREXX interface. After the
ADDRESS DSNREXX "CONNECT "ssid
set up and use
CALL DSNWLIR ....
with the appropriate parameters to issue the command. The Admin Guide appendix has the
parameters. (Older DSNREXX programs use DSNALI for the connection, for those you need
to call DSNWLI2.)
- use batch SDSF
- use SDSF REXX interface in z/OS v1.9

James Campbell

On 10 Jan 2008 at 10:16, Yan Ying wrote:

> Thanks James.
> I can use the display bufferpool command in SD.LOG.It's
> the console didn't have the authorize.But I can send other
> system command like 'D XCF'.I don't know how to make the
> console have appropriate auhorize.
>
>

The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms

ying yan

Re: Got DSN3107I FROM REXX CONSOLE SYSCMD command
(in response to James Campbell)
Hi all,
Thanks for you reply.What confused me is I can send MVS/JES2
cmd in my rexx program and get the return msg.The pgm look like that :
CMD = '$D SPL'
"CONSPROF SOLDISP(NO) SOLNUM(800)"
"CONSOLE ACTIVATE NAME(DALCMD)"
"CONSOLE SYSCMD("||CMD||") CART('DAL001')"
GETCODE = GETMSG('DAL1.',,'DAL001','',10)
"CONSOLE DEACTIVATE"
The program is sub in JCL by IKJEFT01.
Why DB2 cmd need special auth and how to get the auth.
Yan Ying


The IDUG DB2-L Listserv is only part of your membership in IDUG. DB2-L list archives, the FAQ, and delivery preferences are at http://www.idug.org/lsidug under the Listserv tab. While at the site, you can also access the IDUG Online Learning Center, Tech Library and Code Place, see the latest IDUG conference information, and much more. If you have not yet signed up for Basic Membership in IDUG, available at no cost, click on Member Services at http://www.idug.org/lsms