z/OS Security Server RACF System Programmer's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Diagnostic capability

z/OS Security Server RACF System Programmer's Guide
SA23-2287-00

IRRUT200 is designed to detect errors in the internal organization of the RACF® database when run with the INDEX and MAP functions. If you suspect a RACF database error, start your problem determination by running this utility requesting the INDEX FORMAT and MAP ALL functions. If your database has more than one data set, run the utility against each data set that you suspect might be in error. When the job completes, inspect the utility return code. If the return code is zero, it is likely that the data set is okay, but some errors could still exist (see the additional diagnostic information below). If the return code is nonzero, review the output produced by the utility. Most often, a search for "IRR62" messages brings you quickly to the reported error.

See Recovery procedures and z/OS Security Server RACF Diagnosis Guide for more information on RACF database diagnosis and correction.

Additional diagnostic information:
  1. IRRUT200 checks most of the internal organization of a RACF data set, concentrating on the index structure; however, it does not verify every field within a profile. Therefore, it is possible for IRRUT200 to run and produce a zero return code even though the RACF data set contains a profile in error.

    If you suspect that your data set contains such an error, we suggest that you run the RACF database unload utility, (IRRDBU00). The IRRDBU00 utility must read every profile in the database and thereby might (implicitly) identify profiles with errors.

    For more information, see the description of IRRDBU00 in z/OS Security Server RACF Security Administrator's Guide.

  2. If IRRUT200 reports errors on upper-level index blocks only—that is, all profile blocks and level 1 (sequence set) blocks are okay—then you can use the IRRUT400 utility to create a new copy of the RACF data set. This works because the IRRUT400 utility does not use the upper-level index blocks. In fact, it reads only the sequence set blocks from the input data set and builds new upper-level blocks on the output data set. Therefore, your upper-level index block problems might be eliminated by using IRRUT400 to create a new RACF data set.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014