Return codes from the ICHRFX01 preprocessing exit

On return from the exit routine, RACROUTE REQUEST=FASTAUTH checks register 15 for one of the following codes:

Code: Meaning
0: RACROUTE REQUEST=FASTAUTH is to continue processing the request.
4: RACROUTE REQUEST=FASTAUTH is to fail the request. RACROUTE REQUEST=FASTAUTH will return to its caller with a SAF return code of 8 and a RACF® return code (in SAFPRRET) of 8.
8: RACROUTE REQUEST=FASTAUTH is to accept the request. RACROUTE REQUEST=FASTAUTH performs no further authorization processing, and returns control to its caller with a SAF return code of 0 and a RACF return code (in SAFPRRET) of 0.

Any other code from the exit is treated as an error, and RACROUTE REQUEST=FASTAUTH returns to its caller with a SAF return code of 8 and a RACF return code (in SAFPRRET) of X'10'.

Upon return, the exit is responsible for setting the 12th word of the work area (FASTAUTH reason code) that RFXWA points to, as follows:

0 if the exit is not requesting FASTAUTH to audit this request
4 if the exit is requesting FASTAUTH to audit regardless of other auditing options set. (See the ASIS value of the LOG= parameter.)

After FASTAUTH returns to the caller, the 14th word of the work area and R1 point to a profile if all of the following are true:

The profiles were not in a data space,
The SAF return code is 0 or 8, and
A profile, rather than the preprocessing exit, was used to make the decision.

Note: If the preprocessing exit returned to RACF with return code 4 or 8, no profile address is returned to the caller.

The 15th word of the work area can be used to communicate between the preprocessing exit and the postprocessing exit, if any. It can also be used to communicate between the exits and RACF's caller.