topic Re: dcl-e-nocmdproc error in Operating System - OpenVMS

dcl-e-nocmdproc error

Rob Buxton — Mon, 11 Sep 2006 17:33:41 GMT

Hi All,
OpenVMS 7.2-2.
I have a VMS Server at our Disaster Recovery site that uses a copy of the SYSUAF, RightsList, Netproxy & Net$proxy files from the live servers.
The data, e.g user directories etc. is data restored from backup tapes using /image.

On the DR server jobs trying to login to Restricted Accounts (batch, interactive) are failing with the DCL-E-NOCMDPROC error.
If I remove the Restricted flag I can login quite happily and run the login.com file that is specified in the LGICMD authorization.

I've cross checked all of the user directories against the live system and protections and ownership all match, UIC numbers etc. are the same.
I've checked SyLogin.com and that has W:re access.

Are there any issues using copied authorization files?

TIA Rob.

Re: dcl-e-nocmdproc error

Thomas Ritter — Mon, 11 Sep 2006 17:40:03 GMT

Rob, what is the value stored in the LGICMD field of the account ?

Re: dcl-e-nocmdproc error

Rob Buxton — Mon, 11 Sep 2006 18:00:07 GMT

LOGIN and I've also tried LOGIN.COM.
This is happening on all of the restricted Accounts from the copied UAF files.
If I set the account to NoRestricted I can login and manually run login.com with no problem.

Re: dcl-e-nocmdproc error

Thomas Ritter — Mon, 11 Sep 2006 18:54:17 GMT

Rob, please list the full UAF account for the user. The device and directory as well as the lgicmd field come into play. Maybe there is an issues with the uic rights identifier.

Re: dcl-e-nocmdproc error

Rob Buxton — Mon, 11 Sep 2006 19:11:22 GMT

I can but I don't believe that is the issue, as this account (and other restricted accounts) work fine on the Production System.
I have the logicals etc. set up and I can login fine if the Restricted flag is not set.
I would have thought that if it was an issue of the Directory / device then I would not be able to log in at all.
I believe this is something to do with the fact this is using copied UAF files.
I've checked ownerships and the files appear to be owned by the appropriate user with the correct UIC.

Re: dcl-e-nocmdproc error

Thomas Ritter — Mon, 11 Sep 2006 19:15:37 GMT

Here is an example of running a command procedure which does not exist.

You have 2 new Mail messages.

%DCL-E-NOCMDPROC, error opening captive command procedure - access denied
SMITH logged out at 12-SEP-2006 10:11:33.43
%REM-S-END, control returned to node TEST::

How about a full cut and paste ?

Re: dcl-e-nocmdproc error

Steven Schweda — Mon, 11 Sep 2006 19:19:08 GMT

alp $ help /mess NOCMDPROC

NOCMDPROC, error opening captive command procedure - access denied

Facility: CLI, Command Language Interpreter (DCL)

Explanation: When you attempted to log in, you failed because you have a
captive account and DCL received an error during the login.
For example, DCL could not find your LOGIN.COM file. You
may also have incorrect protection on the system's SYLOGIN
file (SYS$MANAGER:SYLOGIN.COM or /SYSTEM/EXEC logical). The
system's SYLOGIN file must be protected with at least WORLD:E
access to the file and the directory that contains it.

User Action: See your system manager.

Such a generic DCL error could be almost
anything. Do you get any harmless-looking
complaints when the accounts are not
restricted? If it's not a protection
problem, then perhaps a manually added "SET
VERIFY" in SYLOGIN.COM and/or LOGIN.COM would
reveal something.

Re: dcl-e-nocmdproc error

Rob Buxton — Mon, 11 Sep 2006 19:31:32 GMT

Steven,
That triggered it, I'd not checked the sys$sylogin logical, that wasn't point to the default sys$manager:sylogin.com.
The file it was pointing to was not on the DR system, corrected that and it works.

Thanks for the input folks.

Re: dcl-e-nocmdproc error

Rob Buxton — Mon, 11 Sep 2006 19:33:37 GMT

As above a missing sylogin.com referenced by a changed sys$sylogin logical.