IKJ56420I
RACF does not know that user ID on this system, so TSO will not let it in.
Also written NOT AUTHORIZED TO USE TSO, TSO LOGON REFUSED
Why it matters. You meet it on ZBPROD, and on any new system. It tells you the ID is the problem, not the password.
Syntax
IKJ56420I USERID userid NOT AUTHORIZED TO USE TSO
- ID not defined
- The system's security database has no such ID. An administrator adds it with ADDUSER.
- Typo in the ID
- Check the spelling and try again.
- No TSO authority
- The ID exists, but has no TSO segment or logon procedure.
- Wrong system
- Each system has its own list. Check you are on the right one.
Try it IKJ56420I
- 1
You've logged off, and TSO waits for a user ID. Try to sign in as ZB0099.
LOGON ===> LOGON ZB0099 - 2
Log on as yourself again, to look into it.
LOGON ===> LOGON ZB0001 - 3
Check with RACF. Does it know ZB0099?
LISTUSER ZB0099 - 4
For this lesson your ID has the RACF authority to add users. Add ZB0099 with the name NEW TELLER and the first password TEMP1.
ADDUSER ZB0099 NAME('NEW TELLER') PASSWORD(TEMP1)
Remember
- IKJ56420I is about the user ID, not the password.
- Check with LISTUSER. ICH30001I means RACF has no such ID.
- Every system has its own RACF. ZBPROD does not know your ID.
The usual mistake
Trying other passwords
The message is about the ID. The system stopped at the ID, so no password will change the answer.
Check the ID is spelt right, then LISTUSER, then ask an administrator
On real z/OS
The message is as on z/OS (IBM says it covers an ID that is not found or not authorised for TSO). Real sites set up TSO use with a TSO segment on the user's RACF profile; MF/OS does not model segments. ICH30001I from LISTUSER is a real RACF message. Real RACF prints nothing for a good ADDUSER; MF/OS adds a note. A real logon starts from the VTAM logon screen of a 3270 session; this lesson types LOGON at the prompt MF/OS shows, and leaves the password step out. ADDUSER needs the SPECIAL attribute or group authority, so on a real system an administrator runs it, and this lesson gives your ID that right.
Where can I practise fixing IKJ56420I?
Right here, at ZedBank. You take a junior job at a simulated bank, meet IKJ56420I in real work and fix it, with Zed beside you. There's nothing to install.
Start at ZedBankRelated
- LogonSigning on to a mainframe system with a user ID and password to start an interactive session.
- RACFThe security manager for z/OS, which decides who may sign on, read a dataset, or run a transaction.
- Access levelHow much a user may do to a resource: read it, change it, or control it, with each level including the ones below.