Comments on: User cannot FTP

By: The Most-Watched IT Questions: August 23, 2011 - ITKE Community Blog

The Most-Watched IT Questions: August 23, 2011 - ITKE Community Blog — Tue, 23 Aug 2011 06:11:02 +0000

[...] 7. NickMcN found the reason one of his users can’t FTP. [...]

By: chalenger

chalenger — Tue, 16 Aug 2011 07:31:57 +0000

Also check Application Administration, Host Application. in the TCP Utilities you can restrict FTP users…

By: nickmcn

nickmcn — Mon, 15 Aug 2011 15:19:11 +0000

I found the problem –

WRKFCNUSG had QIBM_QTMF_CLIENT_REQ_0 (ftp initiation) limited to a list of users. I updated the list to include the specified user, and it worked.

By: tomliotta

tomliotta — Sat, 13 Aug 2011 01:04:44 +0000

Operation not authorized.

What is the message identifier? I couldn’t find any in QCPFMSG nor QTCPMSG at V5R4 that matched that text. Often, without knowing which message it was, the text isn’t helpful to anyone who doesn’t have the joblog. Sometimes a hundred different messages can have the same text.

It might also be useful to know what program sent the message, but the message ID at least is required.

Tom

By: nickmcn

nickmcn — Fri, 12 Aug 2011 15:47:23 +0000

Sorry if I wasn’t clear.

The user starts up ftp by keying the following:
FTP RMTSYS(’10.1.1.2′)

The screen goes back to the command line. Upon looking at the job log, this message is returned:

Operation not authorized.

Other users are able to enter the ftp site. The user in question has the same authorities in his user profile as users that are having no difficulty, as below:
User profile . . . . . . . . . . > KENFRY
User password . . . . . . . . . *SAME
Set password to expired . . . . *NO
Status . . . . . . . . . . . . . *ENABLED
User class . . . . . . . . . . . *SECADM
Assistance level . . . . . . . . *ADVANCED
Current library . . . . . . . . KENFRY
Initial program to call . . . . PMSTRCL
Library . . . . . . . . . . . COMLIB
Initial menu . . . . . . . . . . KENFRY
Library . . . . . . . . . . . KENFRY
Limit capabilities . . . . . . . *NO
Special authority . . . . . . . *ALLOBJ
*AUDIT
*IOSYSCFG
*JOBCTL
*SAVSYS
*SECADM
*SERVICE
*SPLCTL
Special environment . . . . . . *SYSVAL
Display sign-on information . . *NO
Password expiration interval . . *NOMAX
Local password management . . . *YES
Limit device sessions . . . . . *NO