IBM Support

Upgrade RACF220, Subset HRF2220

Preventive Service Planning


Abstract

RACF VERSION 2, RELEASE 2, MODIFICATION 0

Content

  Preventive Service Planning

Upgrade RACF220, Subset HRF2220

Service Recommendation Summary Installation Information
Documentation Changes General Information
Service Recommendations Cross Product Dependencies
Informational/Documentation PTF/APAR Reference Lists


Upgrade RACF220, Subset HRF2220:

THIS SUBSET CONTAINS INSTALLATION INFORMATION FOR RACF
VERSION 2, RELEASE 2, MODIFICATION 0.


Change Summary

DATE LAST CHANGED SECTION 1. 96/07/02 INSTALLATION INFORMATION 2. 95/09/05 DOCUMENTATION CHANGES NO ENTRIES 3. 96/08/15 GENERAL INFORMATION 4. 02/10/04 SERVICE RECOMMENDATIONS 5. 96/08/23 CROSS PRODUCT DEPENDENCIES


Service Recommendation Summary

DATE APAR PTF VOLID COMMENTS 26 02/10/04 OW39030 UW59308 9905 HIPER LOOP IN IRRUT100 AFTER 25 00/01/25 OW42339 UW66589 0001 HIPER ABENDA78-0C ABENDA78 RC0C 24 99/11/12 OW40639 UW64160 9911 HIPER CAMPATABILITY APAR FOR 23 99/06/04 OW38705 UW59619 9906 HIPER OW36832 NEEDS TO BE 22 98/03/16 OW31114 UW46466 9803 HIPER CSA OVERLAYS CAUSED BY 21 98/03/10 OW30469 UW44912 9801 HIPER DEADLOCK CAN OCCUR IF THE 20 98/01/28 ITEM DELETED 98/03/13 19 97/10/23 OW29440 UW42559 9710 HIPER USERID NOT REVOKED WHEN 18 97/10/14 OW29143 UW42418 9710 HIPER ABEND 0C4 IS POSSIBLE IN 17 97/10/06 OW27527 UW39716 9707 HIPER EXCESSIVE ICHEINTY'S 16 97/09/01 OW27530 UW41017 9708 HIPER ABENDA78 RC00C ABEND0C4 15 96/11/18 OW23210 UW33506 9611 HIPER INSTRUCTION LOOP IN 14 96/10/18 OW21835 UW31700 9609 HIPER ABEND878 FOLLOWED BY 13. 96/09/25 OW16094 UW25048 9601 LOOP AND MISSING PROFILES IN 12 96/09/23 OW22268 UW32149 9609 HIPER DELGROUP COMMAND ALLOWS 11 96/08/09 OW21434 UW90335 9608 HIPER RACROUTE REQUEST=FASTAUTH 10 96/07/17 OW20116 UW28992 9605 HIPER RACF COMMAND DIRECTION 9 96/06/03 OW20022 UW28894 9605 HIPER DATABASE CORRUPTED 8 96/05/27 OW18361 UW28415 9605 HIPER SYSTEM HANGS OCCUR DUE TO 7 96/05/27 OW18781 UW28432 9605 HIPER CONTENTION FOR RESOURCES 6 96/02/14 OW17969 UW25450 9602 HIPER MSGIRR65013I INVALID INDEX 5 96/01/01 OW17257 UW24161 9512 HIPER IN DATA SHARING MODE, AN 4 95/11/02 OW16088 UW22452 9510 HIPER STARTED PROCEEDURES RUN AS 3 95/11/01 OW13698 UW22346 9510 HIPER MSGICH409I ABEND878 AND 2 95/11/01 OW14930 UW22310 9510 HIPER RACF DATA SET INDEX 1 95/09/01 OW15012 UW20766 9508 HIPER CLEANUP OF APAR ROLLUP


Installation Information

THIS SECTION CONTAINS CHANGES TO THE PRODUCT'S PROGRAM DIRECTORY. 4. 96/07/02 SECTION OF PROG. DIRECTORY REFERENCED: 6.1.6 Page 47 Existing instructions tell you to make sure that RC(0) is specified for the UTILITY entry for the assembler and for the linkage editor. This is incorrect. They should both be RC(4). 3. 96/04/24 SECTION OF PROG. DIRECTORY REFERENCED: "6.1.21 Create or Update the Database Name Table or Alter the Master JCL" The following is stated: ICHRDSNT MUST RESIDE IN ONE OF THE FOLLOWING: . A data set that is specified in the linklist concatenation in the SYS1.PARMLIB member LNKLSTXX . The LPALIST concatenation in SYS1.PARMLIB member LPALSTXX . A data set pointed to by an IEALPAXX member of SYS1.PARMLIB * The previous is incorrect and should say the following: ICHRDSNT MUST RESIDE IN THE FOLLOWING: SYS1.LINKLIB or any other APF-authorized linklist library. It must be linked with RMODE(24). 2. 95/09/28 If you are planning to share your RACF database between different versions of RACF, be aware that the default encryption algorithm has changed with RACF 2.1. DES is the default encryption algorithm with both RACF 2.1 and RACF 2.2. This may require you to take action during the installation of RACF 2.2. Look in the System Programmer's Guide (SC23-3725-01) at the section entitled "Password Authentication Options" in Chapter 3 for more information. 1. 95/08/21 SECTION OF PROG. DIRECTORY REFERENCED: 5.2.5--Allocating Data Sets Parts deleted from RACF 2.2 With RACF 2.2, numerous unused parts were removed from the release. Here is a summary of the parts deleted. Parts Part Type Name of Parts Deleted ---------------- --------- --------------------- 70 RACF Panels ++PNL ICHP9xxx, ICHPAxxx 9 CLISTs ++CLIST ICHSFSxx (except ICHSFSIN) 94 Help Panels ** ++HELP ICHH9xxx, ICHHAxxx, ICHHFxxx 7 Help Messages ++MSG ICHM9xxx (except ICHM90) A total of 180 parts were deleted. **NOTE: There are over 30 help panels that remain with the ICHHAxxx name and 3 help panels that remain with the ICHHFxxx name.


Documentation Changes

THIS SECTION OUTLINES MAJOR ERRORS IN THE PRODUCT'S PUBLISHED DOCUMENTATION. 1. 95/09/05 Please refer to APAR OW15303 (attached).


General Information

THIS SECTION CONTAINS GENERAL INFORMATION, I.E. SYSGEN HINTS/TIPS. 4. 96/08/15 When installing OS/390 ServerPac 2 exits will be activated (ICHRCX01 and ICHRTX01) which will cause RACF to provide no protection until the exits are removed. Information regarding this is provided in the ServerPac install guide. Please see that documentation for more information. These exits can be restored by running job HRF2220P that the ServerPac provides. 3. 95/08/22 (II08829) INCORRECT NUMBER OF RECORDS SHOWN BY RACF COMMAND TARGET NODE(X) LIST. Refer to II08829 (attached). 2. 95/08/21 Change in RACF DFLTGRP not reflected in Submitted Job Due to changes made with APAR OW08457, if you don't want the group ID of the submitter propagated to the NJE (Network Job Entry) batch jobs possibly causing the job to fail, you need to create a GROUPJ NODES profile with an ADDMEM of &DFLTGRP. See the APAR or the "Understanding NODES Profiles" section of the Security Administrator's Guide (SC23-3726-01) for more details. 1. 95/08/21 Command Processing Changes With RACF 2.2, RACF command processing has changed. IRRENV00, a command envelope load module, receives control before most command processors. If you have front-end processors for any RACF commands, you may need to modify the method of invocation or change the routine. See the Planning: Installation and Migration manual (GC23-3736-01) for more information on this and other migration considerations.


Service Recommendations

26 02/10/04 PROBLEM: (OW39030) LOOP IN IRRUT100 AFTER RACF V2R8 IS IPLED. LOOPING ON USER PROFILE IRRCERTA (LOWER CASE USERID WITH NO GROUP CONNECTIONS) USERS AFFECTED: ICHEINTY IPLNEXTC TYPE=CON issuers, such as IRRUT100 RECOMMENDATION: INSTALL UW59308 ON VOLID 9905 (HRF2220) 25 00/01/25 PROBLEM: (OW42339) ABENDA78-0C ABENDA78 RC0C WHEN ISSUING COMMANDS FROM OPERATOR CONSOLE OR WHEN AUTOISSUED FROM SUBSYSTEM LIKE NETVIEW USERS AFFECTED: Installations that ship ENVR objects across systems. For example, installations using MCS consoles with command authority checking. SYSPLEXDS RECOMMENDATION: INSTALL UW66589 ON VOLID 0001 (HRF2220) 24 99/11/12 PROBLEM: (OW40639) CAMPATABILITY APAR FOR OW40129 USERS AFFECTED: Installations that ship ENVR objects across systems. For example, installations using MCS consoles with command authority checking. SYSPLEXDS RECOMMENDATION: INSTALL UW64160 ON VOLID 9911 (HRF2220) 23 99/06/04 PROBLEM: (OW38705) OW36832 NEEDS TO BE SHIPPED ON R230 (YR2000) USERS AFFECTED: Users of RACROUTE REQUEST=EXTRACT (YR2000) RECOMMENDATION: INSTALL UW59619 ON VOLID 9906 (HRF2220) 22 98/03/16 PROBLEM: (OW31114) CSA OVERLAYS CAUSED BY RACF DATASETS BEING OUT OF SYNC USERS AFFECTED: RACF users in a sysplex environment, running with primary and backup databases active, and in which statistics are to be duplicated in the backup databbase. (SYSPLEXDS) RECOMMENDATION: INSTALL UW46466 ON VOLID 9803 (HRF2220) 21 98/03/10 PROBLEM: (OW30469) DEADLOCK CAN OCCUR IF THE FIELD CLASS IS NOT RACLISTED WHEN RUNNING WITH A SPLIT RACF DATABASE. USERS AFFECTED: Customers who are doing field level access checking (FLAC), and therefore have the FIELD Class active. RECOMMENDATION: INSTALL UW44912 ON VOLID F801 (HRF2220) INSTALL UW44913 ON VOLID F801 (HRF2230) INSTALL UW44914 ON VOLID F801 (HRF2240) 20 98/01/28 ITEM DELETED 98/03/13 19 97/10/23 PROBLEM: (OW29440) USERID NOT REVOKED WHEN THE MAXIMUM PASSWORD ATTEMPTS NUMBER IS REACHED WITH CACHED ACEE. USERS AFFECTED: Users logging on to systems where ACEE VLF caching and SETR REVOKE(number) are in effect. RECOMMENDATION: INSTALL UW42559 ON VOLID 9710 (HRF2220) 18 97/10/14 PROBLEM: (OW29143) ABEND 0C4 IS POSSIBLE IN THE RACF RECOVERY ROUTINE ICHRST00 UW38578 +173E USERS AFFECTED: All RACF installations when a RACROUTE or a DataBase Manager routine abends. RECOMMENDATION: INSTALL UW42418 ON VOLID 9710 (HRF2220) 17 97/10/06 PROBLEM: (OW27527) EXCESSIVE ICHEINTY'S DURING RACROUTE REQUEST=VERIFY AND VERIFYX PROCESSING ADVERSELY AFFECTS LOGON PERFORMANCE. USERS AFFECTED: All RACF shops RECOMMENDATION: INSTALL UW39716 ON VOLID 9707 (HRF2220) 16 97/09/01 PROBLEM: (OW27530) ABENDA78 RC00C ABEND0C4 ABEND DURING RACINIT PROCESSING AFTER UW33149 UW33150 OW21079 ROUTING COMMANDS USERS AFFECTED: Customers running in SYSPLEX environment. (SYSPLEXDS) RECOMMENDATION: INSTALL UW41017 ON VOLID 9708 (HRF2220) 15 96/11/18 PROBLEM: (OW23210) INSTRUCTION LOOP IN IRRDEN00 AFTER ISSUING RVARY ACTIVE FOR THE CURRENTLY ACTIVE RACF DATASET USERS AFFECTED: RACF RVARY ACTIVE commands specifying the currently active RACF dataset RECOMMENDATION: INSTALL UW33506 ON VOLID 9611 14 96/10/18 PROBLEM: (OW21835) ABEND878 FOLLOWED BY ABEND0F9 IN THE RACF SUBSYSTEM WHEN PROCESSING OUTPUT FOR AN 8-CHARACTER USERID. USERS AFFECTED: RECOMMENDATION: INSTALL UW31700 ON VOLID 9609 13. 96/09/25 PROBLEM: (OW16094) LOOP AND MISSING PROFILES IN SEARCH AND LISTDSD OUTPUT AS WELL AS LOOPS IN IRRUT100. USERS AFFECTED: All RDS RACF users 1.9.0 and beyond. Particularly affected are those whose protected datasets tend to be renamed. Non-RDS RACF drivers are not affected. RECOMMENDATION: INSTALL UW25048 ON VOLID 9601 12 96/09/23 PROBLEM: (OW22268) DELGROUP COMMAND ALLOWS DELETION OF SUBGROUPS WHEN USERS ARE NOT CONNECTED TO SUPERIOR GROUPS. USERS AFFECTED: RECOMMENDATION: INSTALL UW32149 ON VOLID 9609 11 96/08/09 PROBLEM: (OW21434) RACROUTE REQUEST=FASTAUTH CROSS-MEMORY AND LOG SUPPORT NOT COMPLETE. USERS AFFECTED: RACROUTE REQUEST=FASTAUTH issuers. RECOMMENDATION: INSTALL UW90335 ON VOLID 9608 10 96/07/17 PROBLEM: (OW20116) RACF COMMAND DIRECTION FAILS DUE TO UNINITIALIZED STORAGE USERS AFFECTED: Users who issue RACF commands with Automatic Command Direction active. RECOMMENDATION: INSTALL UW28992 ON VOLID 9605 9 96/06/03 PROBLEM: (OW20022) DATABASE CORRUPTED EXTENDING A PROFILE, CROSSES BAM BOUNDARY USERS AFFECTED: RECOMMENDATION: INSTALL UW28894 ON VOLID 9605 8 96/05/27 PROBLEM: (OW18361) SYSTEM HANGS OCCUR DUE TO FORCING USERS OWNING RACF LATCHES 96/02/05 PTF PEREMOVE USERS AFFECTED: RECOMMENDATION: INSTALL UW28415 ON VOLID 9605 7 96/05/27 PROBLEM: (OW18781) CONTENTION FOR RESOURCES ASSOCIATED WITH SYSPLEX DATA SHARING ENABLED IN RACF USERS AFFECTED: RACF 210 and RACF 220 data sharing sysplexes (SYSPLEXDS). RECOMMENDATION: INSTALL UW28432 ON VOLID 9605 6 96/02/14 PROBLEM: (OW17969) MSGIRR65013I INVALID INDEX FOR A TAPE VOLUME SET RACF DATABASE CORRUPTED USERS AFFECTED: RECOMMENDATION: INSTALL UW25450 ON VOLID 9602 5 96/01/01 PROBLEM: (OW17257) IN DATA SHARING MODE, AN ALTERI ON A MULTI RBA PROFILE MAY RESULT IN DATABASE CORRUPTION USERS AFFECTED: RECOMMENDATION: INSTALL UW24161 ON VOLID 9512 4 95/11/02 PROBLEM: (OW16088) STARTED PROCEEDURES RUN AS UNDEFINED TO RACF WHEN STDATA SEGMENT DOES NOT CONTAIN A GROUP. USERS AFFECTED: Users of SMS Managed Datasets, with PTM UW18746 applied and using STARTED profiles Where GROUP is not specified. RECOMMENDATION: INSTALL UW22452 ON VOLID 9510 3 95/11/01 PROBLEM: (OW13698) MSGICH409I ABEND878 AND ABEND80A DUE TO RACF ALLOCATION OF SGFBUFFERS BELOW THE 16M LINE. USERS AFFECTED: RECOMMENDATION: INSTALL UW22346 ON VOLID 9510 2 95/11/01 PROBLEM: (OW14930) RACF DATA SET INDEX CORRUPTED.MSGIRR407I RACF DATA SET INDEX ERR OR USERS AFFECTED: RECOMMENDATION: INSTALL UW22310 ON VOLID 9510 1 95/09/01 PROBLEM: (OW15012) CLEANUP OF APAR ROLLUP ERRORS FOR OW11685, OW12879, AND OW10981. USERS AFFECTED: USERS WHO NEED RACLISTED PROFILES. USERS RUNNING IN DATA SHARING MODE RECOMMENDATION: INSTALL UW20766 ON VOLID 9508


Cross Product Dependencies

THIS SECTION CONTAINS INFORMATION THAT IS DEPENDENT UPON ANOTHER PRODUCT OTHER THAN THIS SUBSET ID. 2. 96/08/23 INTERDEPENDENT PRODUCT: JES2 PROBLEM: (OW19852) 1. ABEND0C4 in HASCJBST when processing the return jobid function in routine SSIRRRET during RACF STOP processing. RACF STOP command was introduced in RACF 2.2 (5752XXH00, HRF2220). 2. ABEND0C4 in HASCJBST during recovery from first abend in routine RECJTE while performing cleanup. USERS AFFECTED: All users of HJE4420. RECOMMENDATION: INSTALL UW31581 ON VOLID 9608 (HJE4420) 1. 96/05/15 INTERDEPENDENT PRODUCT: CICSplex V1R2M0 PROBLEM: (PN78693) A CPSM V1R2M0 CAS will fail to initialize when running with RACF 2.2. Messages BBMXBI09E, BBMXBK12E, BBMXBK13E and BBMZC012E will be displayed in the CAS joblog and on the CONSOLE. USERS AFFECTED: All CICSPlex/SM V1R2M0 Users RECOMMENDATION: INSTALL UN89325 ON VOLID 9604


Informational / Documentation


PTF / APAR Reference Lists

PTF Include List
PTF Exclude List
PE APAR List
II08829 OW15303


End of Upgrade RACF220 , Subset HRF2220 , as of 2019/08/08.



[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG90","label":"z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"","Edition":"","Line of Business":{"code":"LOB56","label":"Z HW"}}]

Document Information

Modified date:
04 October 2002

UID

isg1_RACF220_HRF2220