I was trying to define an MQ queue using %CSQ9 DEFINE QL(AA) and was getting
ICH408I USER(IBMUSER ) GROUP(SYS1 ) NAME( ) CSQ9.QUEUE.AA CL(MQADMIN ) PROFILE NOT FOUND - REQUIRED FOR AUTHORITY CHECKING ACCESS INTENT(ALTER ) ACCESS ALLOWED(NONE )
But the profile existed!
The command tso rlist MQADMIN CSQ9.QUEUE.AA showed me the profile which would be used
CLASS NAME ----- ---- MQADMIN CSQ9.QUEUE.* (G)
It did not look like the class was being cached
SETR RACLIST CLASSES = APPL CBIND CDT CONSOLE CSFKEYS CSFSERV DASDVOL DIGTCERT DIGTCRIT DIGTNMAP DIGTRING DSNR EJBROLE FACILITY IDIDMAP LOGSTRM OPERCMDS PTKTDATA PTKTVAL RDATALIB SDSF SERVAUTH SERVER STARTED SURROGAT TSOAUTH TSOPROC UNIXPRIV WBEM XCSFKEY XFACILIT ZMFAPLA ZMFCLOUD
But I missed the
GLOBAL=YES RACLIST ONLY = MQADMIN MQNLIST MQPROC MQQUEUE MXTOPIC
I used the
TSO SETROPTS RACLIST(MQADMIN) REFRESH
and the define command worked. Another face palming moment.
Lesson learned -if indoubt use the SETROPTS RACLIST(MQADMIN) REFRESH command
One thought on “Why isnt my MQ RACF command working?”