RE: "Not authorized to command XXXXXXXX"

That sounds right.



> -----Original Message-----
> From: security400-admin@midrange.com
> [mailto:security400-admin@midrange.com]On Behalf Of Bale, Dan
> Sent: Monday, August 20, 2001 5:40 PM
> To: security400@midrange.com
> Subject: [Security400] "Not authorized to command XXXXXXXX"
>
>
> This is a multi-part message in MIME format.
> --
> [ Picked text/plain from multipart/alternative ]
> O.K., next one:
>
> How about when I come across a situation where the admin is unable to
> run a given command, say STRHOSTSVR (we had this over the weekend), the
> message says
>  Message . . . . :   Not authorized to command STRHOSTSVR in library
> *LIBL.
>  Cause . . . . . :   An attempt was made to access a command without
>    adequate authority.
>
>  Recovery  . . . :   Obtain authority from the security officer or the
>    command owner, and then try the command again.
>
>
> In this scenario, I would simply like to look up STRHOSTSVR somewhere,
> and have the reference tell me what I need to do to enable this admin to
> use the command.  So I go to the OS/400 Security Reference, do a search
> on STRHOSTSVR and get two hits.  First hit tells me that this command is
> shipped with public authority *EXCLUDE.  And "The security officer can
> grant *USE authority to others."  The second hit tells me that QSECOFR,
> QPGMR, QSYSOPR, QSRV, QSRVBAS are authorized to this command.
>
> Am I correct that I can give the group profile for admins *USE authority
> to the STRHOSTSVR command to solve our dilemna?  Or is there something
> else that needs to be done?
>
> Dan Bale
> IT - AS/400
> Handleman Company
> 248-362-4400  Ext. 4952
> D.Bale@Handleman.com
>   Quiquid latine dictum sit altum viditur.
>   (Whatever is said in Latin seems profound.)
> _______________________________________________
> This is the Security Administration on the AS400 / iSeries
> (Security400) mailing list
> To post a message email: Security400@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/security400
> or email: Security400-request@midrange.com
>

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com