Controlling Syntax Error Processing for Command Limiting › Logonids That Should Have the SYNERR Logonid Field

Logonids That Should Have the SYNERR Logonid Field

We recommend you assign SYNERR(LOG) or SYNERR(ALLOW) to the directory maintenance virtual machine (usually DirMaint) and the remote spooling communications subsystem (usually RSCS). These virtual machines rely on the standard CP syntax error return codes during their normal processing.

To include the SYNERR field in a user logonid record, use the CHANGE lid SYNERR(option) command, where option is ALLOW, LOG, PREVENT, or PREVENT-LOG. To remove the field from a user's logonid record, specify SYNERR( ) .

If you do not change the value for SYNERR from the default of null (or blank), CA ACF2 for z/ VM passes error processing to the next hierarchical level for checking. The first level of checking is the logonid record attribute. If the SYNERR value is null, the next level of checking is the syntax model. If you did not specify a value for the SYNERR syntax model, CA ACF2 for z/ VM checks the VMO record. If CA ACF2 for z/ VM does not find a value for SYNERR there, it takes the default action of PREVENT (no logging).