z/OS Security Server RACF Diagnosis Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Variable data recorded by RACF callable services

z/OS Security Server RACF Diagnosis Guide
GA32-0886-00

Each RACF® callable service records additional variable data specific to the problem:
R_usermap (CSECT IRRRIM00)
  • Error determining the RACF user ID associated with an application user identity
    • Service name: RACXTRT or ICHEINTY
    • Variable data: The string 'IRRRIM00_XXXX:', where XXXX is the procedure name from which error occurs
    • Additional variable data: application user identity and field names, such as SNAME or UNAME
  • Error determining the application user identity associated with a RACF user ID
    • Service name: RACXTRT
    • Variable data: The string 'IRRRIM00_XXXX:', where XXXX is the procedure name from which error occurs
    • Additional variable data: RACF user ID and field names, such as SNAME or UNAME
  • Figure 1 shows an example of a symptom record when the user name is not found in an alias index entry but is found in the mapping profile.
    Figure 1. An example of a symptom record when an SNAME is not found in the alias index entry but is found in the mapping profile (part 1 of 2)
    TYPE:  SYMPTOM RECORD    REPORT:  SOFTWARE EDIT REPORT     DAY YEAR
                                      REPORT DATE:  032  00
    SCP:   VS 2 REL 3                 ERROR DATE:    032  00
                          MODEL:  4381             HH  MM  SS.TH
                          SERIAL: 127685           TIME: 08:28:48.85
    SEARCH ARGUMENT ABSTRACT:
               PIDS/5752XXH00 PRCS/0000000C PRCS/00000000 RIDS/IRRRIM00
               RIDS/IRRRFR10#L
    
    SYSTEM ENVIRONMENT:
              CPU MODEL:  4381                     DATE:  032  00
              CPU SERIAL: 127685                   TIME:  08:28:48.85
              SYSTEM:     RACFR10                  BCP:   MVS
              RELEASE LEVEL OF SERVICE ROUTINE:      HBB7703
              SYSTEM DATA AT ARCHITECTURE LEVEL:     10
              COMPONENT DATA AT ARCHITECTURE LEVEL:  10
              SYSTEM DATA:  00000000 00000000        |........|
    COMPONENT INFORMATION:
                COMPONENT ID:             5752XXH00
                COMPONENT RELEASE LEVEL:  7703
                SERVICE RELEASE LEVEL:    HRF7703
                DESCRIPTION OF FUNCTION:  RACF z/OS UNIX SYSTEM CALLABLE SERV.
                PROBLEM ID:               ICHEINTY
    
    PRIMARY SYMPTOM STRING:
                PIDS/5752XXH00 PRCS/0000000C PRCS/00000000 RIDS/IRRRIM00
                RIDS/IRRRFR10#L
    
                SYMPTOM             SYMPTOM DATA     EXPLANATION
                ---------------     -------------    -----------
                PIDS/5752XXH00      5752XXH00        COMPONENT IDENTIFIER
                PRCS/0000000C       0000000C         RETURN CODE
                PRCS/00000000       00000000         RETURN CODE
                RIDS/IRRRIM00       IRRRIM00         ROUTINE IDENTIFIER
                RIDS/IRRRFR10#L     IRRRFR10#L       ROUTINE IDENTIFIER
    
    SECONDARY SYMPTOM STRING:
               ADRS/0000140C
    
               SYMPTOM            SYMPTOM DATA    EXPLANATION
               ---------------    -------------   -----------
               ADRS/0000140C      0000140C        STORAGE ADDRESS
    
    FREE FORMAT COMPONENT INFORMATION:
    KEY = F000     LENGTH = 000100 (0064)
    +000   C9D9D9D9   C9D4F0F0   6DC19389   81A26DD3       |IRRRIM00_ALIAS_L|
    +010   96837A40   E2D5C1D4   C540D4E8   40D3D596       |OC: SNAME MY LNO|
    +020   A385A240   C9958696   40404040   40404040       |TES INFO        |
    +030 LENGTH(0048) ==> ALL BYTES CONTAIN X'40'.
    +060    40404040                                       |                |
    
    HEX DUMP OF RECORD:
    HEADER
    +000   4C831800   00000000   0000032F   08284885       |<C.............E|
    +010   FF127685   43810000                             |    ...E.A..    |
    Figure 2. An example of a symptom record when an SNAME is not found in the alias index entry but is found in the mapping profile (part 2 of 2)
    SYMPTOM RECORD
    +000   E2D9F4F3   F8F1F1F2   F7F6F8F5   FFFFBCF1      |SR4381127685...1|
    +010   B388C6D9   4BC38185   40404040   40404040      |.HFR.CAE        |
    +020   4040D9C1   C3C6D9F1   F040F5F7   F5F2C8C2      |RACFR10 5752HB  |
    +030   C2F7F7F0   F3400080   00000000   00000000      |B7703 ..........|
    +040   F1F00030   00640070   00490138   000E0181      |10.............A|
    +050   0068018F   00000000   00000000   00000000      |................|
    +060   00000000   00000000   00000000   00000000      |................|
    +070   E2D9F2F1   F1F0F5F7   F5F2E7E7   C8F0F000      |SR21105752XXH00.|
    +080   F7F7F0F3   C8D9C6F7   F7F0F340   00000000      |7703HRF7703 ....|
    +090   00000000   00000000   00000000   D9C1C3C6      |............RACF|
    +0A0   40D69785   95C58489   A3899695   40C38193      |z/OS UNIX SYSTEM|
    +0B0   93818293   8540E285   99A54B40   00000000      |CALLABLE SERV. .|
    +0C0   00000000   C9C3C8C5   C9D5E3E8   00000000      |....ICHEINTY....|
    +0D0   00000000   066839B1   066839B1   066839BF      |................|
    +0E0   066839BF   06683A27   06683A27   01000000      |................|
    +0F0   06683830   00000000   00000000   F0F1F2F3      |............0123|
    +100   F4F5F6F7   F8F9C1C2   C3C4C5C6   0049000E      |456789ABCDEF....|
    +110   0068000F   00000000   F0F0F0F0   F1F4F0C3      |........0000140C|
    +120   00000000   00000000   00000000   00000000      |................|
    +130   00000000   00000000   D7C9C4E2   61F5F7F5      |........PIDS/575|
    +140   F2E7E7C8   F0F040D7   D9C3E261   F0F0F0F0      |2XXH00 PRCS/0000|
    +150   F0F0F0C3   40D7D9C3   E261F0F0   F0F0F0F0      |000C PRCS/000000|
    +160   F0F040D9   C9C4E261   C9D9D9D9   C9D4F0F0      |00 RIDS/IRRRIM00|
    +170   40D9C9C4   E261C9D9   D9D9C6D9   F1F07BD3      | RIDS/IRRRFR10#L|
    +180   40C1C4D9   E261F0F0   F0F0F1F4   F0C340F0      | ADRS/0000140C 0|
    +190   000064C9   D9D9D9C9   D4F0F06D   C1938981      |...IRRRIM00_ALIA|
    +1A0   A26DD396   837A40E2   D5C1D4C5   40D4E840      |S_LOC: SNAME MY |
    +1B0   D3D596A3   85A240C9   95869640   40404040      |LNOTES INFO     |
    +1C0 LENGTH(0048) ==>ALL BYTES CONTAIN X'40'.
getGMAP (CSECT IRRRGM01)
  • Error extracting the group name corresponding to the input group ID
    • Service name: RACXTRT or ICHEINTY
    • Variable data: The string 'IRRRGM01_XXXX: YYYY', where XXXX is the procedure name from which error occurs and YYYY is the GROUP mapping profile name for RACXTRT service or is the GROUP Alias name for ICHEINTY service
  • Error extracting the group ID corresponding to the input group name
    • Service name: RACXTRT
    • Variable data: The string 'IRRRGM01_XXXX: YYYY', where XXXX is the procedure name from which error occurs and YYYY is the GROUP profile name
getGMAP/getUMAP/initUSP (CSECT IRRRUM02)
  • Error locating or updating a profile during automatic UID/GID assignment
    • Service name: ICHEINTY
    • Variable data: The string ’IRRRUM02_XXXX: YYYY’, where XXXX is the procedure name from which error occurs and YYYY is the ICHEINTY operation
    • Additional Variable data: class name and profile name
    • Primary symptom string return code: ICHEINTY return code
    • Secondary symptom string reason code: ICHEINTY reason code
  • Error processing APPLDATA for the BPX.NEXT.USER profile in the FACILITY class
    • Service name: BPXNEXT
    • Variable data: The string ’IRRRUM02_XXXX: YYYY’, where XXXX is the procedure name from which error occurs and YYYY is the profile being processed for automatic UID/GID assignment
    • Additional variable data: One of the following error descriptions:
      • Profile BPX.NEXT.USER ran out of UID values
      • Profile BPX.NEXT.USER ran out of GID values
getUMAP (CSECT IRRRUM01)
  • Error extracting the user name corresponding to the input user ID
    • Service name: RACXTRT or ICHEINTY
    • Variable data: The string 'IRRRUM01_XXXX: YYYY', where XXXX is the procedure name from which error occurs and YYYY is the USER mapping profile name for RACXTRT service or is the USER application identity name for ICHEINTY service
  • Error extracting the user ID corresponding to the input user name
    • Service name: RACXTRT
    • Variable data: The string 'IRRRUM01_XXXX: YYYY', where XXXX is the procedure name from which the error occurs and YYYY is the USER profile name
  • Figure 3 shows an example of a symptom record when the user name is not found in an alias index entry but is found in the mapping profile.
    Figure 3. An example of a symptom record when a UID is not found in the alias index entry but is found in the mapping profile (part 1 of 2)
    TYPE:  SYMPTOM RECORD        REPORT:  SOFTWARE EDIT REPORT        DAY YEAR
                                          REPORT DATE: 032  00
    SCP:   VS 2 REL 3                     ERROR DATE: 032  00
                        MODEL:  4381               HH  MM  SS.TH
                        SERIAL: 127685   TIME: 09:16:23.25
    SEARCH ARGUMENT ABSTRACT:
              PIDS/5752XXH00 PRCS/0000000C PRCS/00000000 RIDS/IRRRUM01
              RIDS/IRRRFR10#L
    
    SYSTEM ENVIRONMENT:
              CPU MODEL:  4381               DATE:  032  00
              CPU SERIAL: 127685             TIME:   09:16:23.25
              SYSTEM:  RACFR10               BCP:    MVS
              RELEASE LEVEL OF SERVICE ROUTINE:      HBB7703
              SYSTEM DATA AT ARCHITECTURE LEVEL:     10
              COMPONENT DATA AT ARCHITECTURE LEVEL:  10
              SYSTEM DATA:  00000000 00000000         |........|
    COMPONENT INFORMATION:
               COMPONENT ID:            5752XXH00
               COMPONENT RELEASE LEVEL:  7703
               SERVICE RELEASE LEVEL:    HRF7703
               DESCRIPTION OF FUNCTION:  RACF z/OS UNIX SYSTEM CALLABLE SERV.
               PROBLEM ID:               ICHEINTY
    
    PRIMARY SYMPTOM STRING:
               PIDS/5752XXH00 PRCS/0000000C PRCS/00000000 RIDS/IRRRUM01
               RIDS/IRRRFR10#L
    
               SYMPTOM              SYMPTOM DATA     EXPLANATION
               --------------       ---------------  -------------
               PIDS/5752XXH00       5752XXH00        COMPONENT IDENTIFIER
               PRCS/0000000C        0000000C         RETURN CODE
               PRCS/00000000        00000000         RETURN CODE
               RIDS/IRRRUM01        IRRRUM01         ROUTINE IDENTIFIER
               RIDS/IRRRFR10#L      IRRRFR10#L       ROUTINE IDENTIFIER
    
    SECONDARY SYMPTOM STRING:
               ADRS/00000BAA
    
               SYMPTOM              SYMPTOM DATA     EXPLANATION
               ---------------      -------------    -----------
               ADRS/00000BAA        00000BAA         STORAGE ADDRESS
    
    FREE FORMAT COMPONENT INFORMATION:
    KEY = F000     LENGTH = 000100 (0064)
    +000    C9D9D9D9    E4D4F0F1    6DC1D3C9    C1E26DE4    |IRRRUM01_ALIAS_U|
    +010    D3D6C37A    40F1F2F3    F4F5F6F7     F8404040   |LOC: 12345678   |
    +020 LENGTH(0064) ==> ALL BYTES CONTAIN X'40'.
    +060    40404040                                        |                |
    
    HEX DUMP OF RECORD:
    HEADER
    +000    4C831800    00000000    0000032F    09162325    |<C..............|
    +010    FF127685    43810000                            |...E.A..        |
    Figure 4. An example of a symptom record when a UID is not found in the alias index entry but is found in the mapping profile (part 2 of 2)
    SYMPTOM RECORD
    +000    E2D9F4F3    F8F1F1F2    F7F6F8F5    FFFFBCF1    |SR4381127685...1|
    +010    B388D17B    767DA544    40404040    40404040    |.HJ#.'V.        |
    +020    4040D9C1    C3C6D9F1    F040F5F7    F5F2C8C2    |RACFR10 5752HB  |
    +030    C2F7F7F0    F3400080    00000000    00000000    |B7703 ..........|
    +040    F1F00030    00640070    00490138    000E0181    |10.............A|
    +050    0068018F    00000000    00000000    00000000    |................|
    +060    00000000    00000000    00000000    00000000    |................|
    +070    E2D9F2F1    F1F0F5F7    F5F2E7E7    C8F0F000    |SR21105752XXH00.|
    +080    F7F7F0F3    C8D9C6F7    F7F0F340    00000000    |7703HRF7703 ....|
    +090    00000000    00000000    00000000    D9C1C3C6    |............RACF|
    +0A0    40D69785    95C58489    A3899695    40C38193    |z/OS UNIX SYSTEM|
    +0B0    93818293    8540E285    99A54B40    00000000    |CALLABLE SERV. .|
    +0C0    00000000    C9C3C8C5    C9D5E3E8    00000000    |....ICHEINTY....|
    +0D0    00000000    06694591    06694591    0669459F    |.......J...J....|
    +0E0    0669459F    06694607    06694607    01000000    |................|
    +0F0    06694410    00000000    00000000    F0F1F2F3    |............0123|
    +100    F4F5F6F7    F8F9C1C2    C3C4C5C6    0049000E    |456789ABCDEF....|
    +110    0068000F    00000000    F0F0F0F0    F0C2C1C1    |........00000BAA|
    +120    00000000    00000000    00000000    00000000    |................|
    +130    00000000    00000000    D7C9C4E2    61F5F7F5    |........PIDS/575|
    +140    F2E7E7C8    F0F040D7    D9C3E261    F0F0F0F0    |2XXH00 PRCS/0000|
    +150    F0F0F0C3    40D7D9C3    E261F0F0    F0F0F0F0    |000C PRCS/000000|
    +160    F0F040D9    C9C4E261    C9D9D9D9    E4D4F0F1    |00 RIDS/IRRRUM01|
    +170    40D9C9C4    E261C9D9    D9D9C6D9    F1F07BD3    | RIDS/IRRRFR10#L|
    +180    40C1C4D9    E261F0F0    F0F0F0C2    C1C140F0    | ADRS/00000BAA 0|
    +190    000064C9    D9D9D9E4    D4F0F16D    C1D3C9C1    |...IRRRUM01_ALIA|
    +1A0    E26DE4D3    D6C37A40    F1F2F3F4    F5F6F7F8    |S_ULOC: 12345678|
    +1B0 LENGTH(0064) ===> ALL BYTES CONTAIN X'40'.
InitACEE (CSECT IRRRIA00)
  • Certificate decoding problem
    • Service name: DECX509B
    • Variable data: The following 6 fullwords:
      1. Address of the certificate passed to InitACEE
      2. Length of the certificate passed to InitACEE
      3. Address of the byte found to be in error
      4. Internal diagnostic word
      5. Number of certificate bytes recorded in the next 4 variable data sections
      6. Number of certificate bytes skipped at the beginning of the certificate when recording
    • Additional variable data: up to 1024 bytes of the certificate
  • Error in certificate profile (user ID not valid)
    • Service name: GETUSERI
    • Variable data: The string 'Bad DIGTCERT Class Profile'
    • Additional variable data: The name of the DIGTCERT class profile found to be in error
  • Error in certificate profile (user ID not defined to RACF)
    • Service name: RACINIT
    • Variable data: The string 'Bad DIGTCERT Class Profile'
    • Additional variable data: The name of the DIGTCERT class profile found to be in error
  • Unexpected return code from R_cacheserv SAF callable service
    • Service name: CACHSERV
    • Variable Data: The 8 byte user ID input to R_cacheserv
    • Primary symptom string return code: R_cacheserv return code
    • Primary symptom string return code: R_cacheserv reason code
  • Unexpected return code from RACROUTE REQUEST=VERIFY
    • Service name: RACINIT
    • Variable data: The nine character user ID being verified (1 byte length followed by up to 8 characters for the user ID itself)
  • Problem with IDID user mapping
    • Service name: IRRDID2U
    • Variable data: Includes return code and IDID
InitACEE (CSECT IRRRIA02)
  • Certificate decoding problem
    • Service name: DECX509B
    • Variable data: The following 6 fullwords:
      1. Address of the certificate passed to InitACEE
      2. Length of the certificate passed to InitACEE
      3. Address of the byte found to be in error
      4. Internal diagnostic word
      5. Amount of certificate data recorded
      6. Amount of certificate data truncated
    • Additional variable data: up to 1024 bytes of the certificate
  • Error retrieving the CERTAUTH certificate repeat group from the irrcerta profile.
    • Service name: RACXTRT
    • Variable data: The string 'Couldn't extract the CERTAUTH anchor USER profile, irrcerta'.
    • Additional variable data: none
  • Error extracting the private key size (CERTPRVS) from a DIGTCERT profile.
    • Service name: RACXTRT
    • Variable data: The string 'Bad CERTAUTH class profile:'label-value
    • Additional variable data: The profile name
InitACEE (CSECT IRRRIA05)
  • Error extracting the trust status (UACC) from a DIGTCERT profile
    • Service name: RACEXTR
    • Variable data: The string 'Bad DIGTCERT Class Profile'
    • Additional variable data: The profile name
  • Error extracting date fields CERTSTRT, CERTEND from a DIGTCERT profile
    • Service name: RACEXTR
    • Variable data: The string 'Bad DIGTCERT Class Profile'
    • Additional variable data: The profile name
  • Error extracting the CERTAUTH anchor in the USER profile.
    • Service name: RACEXTR
    • Variable data: The string 'Bad USER class profile — irrcerta'
R_cacheserv (CSECT IRRRCH12)
  • Physical error accessing the CACHECLS profile on the RACF database
    • Service name: ICHEINTY
    • Variable data: The string "LOCATE CACHECLS profile xxxx" where xxxx is the 16 byte profile name.
  • Logical error with the contents of the CACHECLS profile read from the RACF database
    • Service name: Database (not a real Service, rather an indicator something was wrong with the profile read from the RACF database)
    • Variable data: The string "CACHECLS profile xxxx not valid:" where xxxx is the 16 byte profile name. Following that string is one of the following reasons the profile was determined not to be valid.
      • missing profile
      • profile not valid
      • timestamp is not correct
      • data space offset is not correct
      • data space size is not correct
      • data space count is not correct
      • cache version is not correct
R_cacheserv (CSECT IRRRCH13)
  • Physical error accessing the CACHECLS profile on the RACF database
    • Service name: ICHEINTY
    • Variable data: The string "{LOCATE | ALTER | ADD} CACHECLS profile xxxx" where xxxx is the 16 byte profile name.
R_cacheserv (CSECT IRRRCH14)
  • Physical error accessing the CACHECLS profile on the RACF database
    • Service name: ICHEINTY
    • Variable data: The string "{NEXT | DELETE} CACHECLS profile xxxx" where xxxx is the 16 byte profile name.
R_cacheserv (all CSECTs IRRRCHQx in IRRRCH16)
  • Error occurred in data space layer
    • Service name: DISPLAYER
    • Variable data: xxxxxxxx yyyyyyyy zzzzzzzz aaaaaaaa bbbbbbbb: cccccccc
      • xxxxxxxx = Internal subroutine identifier
        The following are possible values for xxxxxxxx. These identify the failing data space layer subroutine:
        Table 1. Failing data space layer for an internal subroutine identifier
        xxxxxxxx Data space layer call
        8 dspCreate
        24 dspDelete
        28 dspConnect
        32 dspExtend
        36 dspExpose
        40 dspHide
        44 addAlet
        48 delAlet
        52 dspAdd
        60 dspDisconnect
        64 dasENQDS
        68 dasDEQDs
        76 dasSetVer
        80 dasGetVer
        84 dasCopyDS
      • yyyyyyyy = Failing system service
        The following are possible values for yyyyyyyy. These identify the failing system service or internal request:
        Table 2. Failing system service for a failing system service identifier
        yyyyyyyy Failing system service
        0 None
        4 TCBTOKEN
        8 DSPSERV CREATE
        12 ALESERV ADD
        16 DSPSERV DELETE
        20 Data space does not exist
        24 Data space header eye-catcher bad
        28 Irrrch10 not found
        32 IEANTCR
        36 IEANTRT
        40 IEANTDL
        44 DSPSERV EXTEND
        48 ALESERV DELETE
        Uppercase values are z/OS system macros. Lowercase values are internal requests.
      • zzzzzzzz = failing system service return code
      • aaaaaaaa = failing system service reason code
      • bbbbbbbb = identifies R_cacheserv subroutine
      • cccccccc = additional diagnostic text, such as "dspCreate failed"
R_cacheserv (CSECTs IRRRCHQx in IRRRCH16)
  • Error occurred in data space layer
    • Service name: DSPLAYER
    • Variable data: bbbbbbbb: cccccccc
      • bbbbbbbb = identifies R_cacheserv subroutine
      • cccccccc = additional diagnostic text
R_cacheserv (CSECTs IRRRCHQC in IRRRCH16)
  • Recovery attempted after a failure during cache creation
    • Service name: REEXPOSE
    • Variable data: bbbbbbbb: RE–EXPOSE cccccccc dddddddd
      • bbbbbbbb = identifies R_cacheserv subroutine
      • cccccccc = identifies failing object
      • dddddddd = successful or failed
R_cacheserv (CSECT IRRRCHQD, IRRRCHQG, IRRRCHQE in IRRRCH16)
  • Name/token service failure
    • Service name: IEANTRT
    • Variable data: bbbbbbbb: IEANTRT error
      • bbbbbbbb = identifies R_cacheserv subroutine
R_cacheserv (CSECT IRRRCHQG in IRRRCH16)
  • Name/token service failure
    • Service name: IEANTCR
    • Variable data: bbbbbbbb: IEANTCR Error
      • bbbbbbbb = identifies R_cacheserv subroutine
R_cacheserv (CSECT IRRRCHQJ in IRRRCH16)
  • Error restoring cache
    • Service name: RESTORE
    • Variable data: Restore: IRRRCH12 Restore DS error
R_cacheserv (CSECT IRRRCH18)
  • Unable to use ICSF for random number generation, therefore, a software pseudo random number generator (SW PRNG) is used. It is possible that CSNBRNG is not found in LPA. See 'FINDMOD:' logrec for more information.
    • Service name: RANDNUM
    • Variable Data: IRRRCH18: USING SW PRNG, NOT CSNBRNG
    • Primary symptom string return code: 4
    • Primary symptom string reason code: 0
  • Unable to find module in LPA using CSVQUERY
    • Service name: name of the module that was not found
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd FINDMOD: UNABLE TO FIND MODULE IN LPA.
      • aaaaaaaa is an indicator of R_cacheserv operation.
        The following are possible values for aaaaaaaa:
        Table 3. Indicator of R_cacheserv operation
        aaaaaaaa Operation
        201 IRRRCH10 SRB failed
        202 Find IRRRCH10 SRB in LPA
        203 Find other module in LPA (CSNBRNG)
        210 Get cell from cell pool in data space
        211 Add cell pool extent to cell pool in data space
        213 Copy data to data cell(s) in cell pool
        214 Locate data in data space
        215 Delete data in data space
        216 R18ADD
        217 R18IDX
        218 R18GET
        219 GenerateReference
        220 CallDes
      • bbbbbbbb is the system service or internal check being performed.
        The following are possible values for bbbbbbbb:
        Table 4. System service or internal check being performed
        bbbbbbbb Service
        8 DSPSERV create – Create data space
        10 CSRPGT1 – Get cell pool cell
        11 CSRPEXP – Add cell pool extent
        12 ALESERV Add
        13 CHKEXT – Check if data space is full (does EXTent area hit data area)
        14 Search – Find node in cache
        15 PLO instruction #1
        16 DSPSERV delete – delete data space
        17 PLO instruction #2
        18 CSRPFR1 – Free cell pool cell (dddddddd = address of cell being freed)
        19 Not used
        20 Expiration time check for data or reference
        21 CSNBRNG – ICSF random number function
        22 Not used
        23 CSVQUERY – Find mod in LPA
        24 RACROUTE TYPE=ENCRYPT
      • cccccccc is return code from service bbbbbbbb.
      • dddddddd is reason code from service bbbbbbbb.
    • Primary symptom string return code: 4
    • Primary symptom string reason code: 0
  • CSNBRNG failure, using software pseudo random number generator (PRNG)
    • Service name: RANDNUM
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd GENREF: USE SOFTWARE PRNG, NOT CSNBRNG
      • aaaaaaaa = indicator of R_cacheserv operation

        See Table 3 for possible values.

      • bbbbbbbb = system service or internal check being performed

        See Table 4 for possible values.

      • cccccccc = return code from service bbbbbbbb
      • dddddddd = reason code from service bbbbbbbb
    • Primary symptom string return code: 0
    • Primary symptom string reason code: 0
  • RACROUTE TYPE=ENCRYPT failure
    • Service name: CALLDES
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd RACROUTE REQ=EXTRACT,TYPE=ENCRYPT FAIL
      • aaaaaaaa = indicator of R_cacheserv operation

        See Table 3 for possible values.

      • bbbbbbbb = system service or internal check being performed

        See Table 4 for possible values.

      • cccccccc = return code from service bbbbbbbb
      • dddddddd = reason code from service bbbbbbbb
    • Primary symptom string return code: RACROUTE return code
    • Primary symptom string reason code: 0
R_cacheserv (CSECT IRRRCH20)
  • Name/token service failure
    • Service name: [IEANTRT0 | IEANTRT1 | IEANTCR]
    • Variable data: SETUPCACHE: [IEANTRT|IEANTCR] FAILURE
    • Primary symptom string return code: return code from IEANTRT/IEANTCR
    • Primary symptom string reason code: 0 (name/token functions have no reason codes)
  • Failure due to no RCVI
    • Service name: FINDRCVI
    • Variable data: RCVTRCVI=0. UNABLE TO BUILD ICTX
    • Primary symptom string return code: 0
    • Primary symptom string reason code: 0
  • Error occurred during STORE operation
    • Service name: STORE
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORE: R18ADD ([1|2]) ERROR
      • aaaaaaaa = indicator of R_cacheserv operation

        See Table 3 for possible values.

      • bbbbbbbb = system service or internal check being performed

        See Table 4 for possible values.

      • cccccccc = return code from service bbbbbbbb
      • dddddddd = reason code from service bbbbbbbb
    • Primary symptom string return code: [0,4,8…]
    • Primary symptom string reason code: 0
  • Error occurred while an R_cacheserv operation was trying to find or create the cache
    • Service name: IRRRCH18
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd SETUPCACHE: ERROR IN IRRRCH18
      • aaaaaaaa = indicator of R_cacheserv operation

        See Table 3 for possible values.

      • bbbbbbbb = system service or internal check being performed

        See Table 4 for possible values.

      • cccccccc = return code from service bbbbbbbb
      • dddddddd = reason code from service bbbbbbbb
    • Primary symptom string return code: [0,4,8…]
    • Primary symptom string reason code: 0
  • Error occurred during DESTROY operation
    • Service name: DESTROY
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd DESTROY: R18TERM ERROR
      • aaaaaaaa = indicator of R_cacheserv operation

        See Table 3 for possible values.

      • bbbbbbbb = system service or internal check being performed

        See Table 4 for possible values.

      • cccccccc = return code from service bbbbbbbb
      • dddddddd = reason code from service bbbbbbbb
    • Primary symptom string return code: [0,4,8…]
    • Primary symptom string reason code: 0
  • Error occurred during RETRIEVE operation
    • Service name: RETRIEVE
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd RETRIEVE: R18GET ERROR
      • aaaaaaaa = indicator of R_cacheserv operation

        See Table 3 for possible values.

      • bbbbbbbb = system service or internal check being performed

        See Table 4 for possible values.

      • cccccccc = return code from service bbbbbbbb
      • dddddddd = reason code from service bbbbbbbb
    • Primary symptom string return code: [0,4,8…]
    • Primary symptom string reason code: 0
  • Error occurred during REMOVE operation
    • Service name: REMOVE
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORE: R18DEL ERROR
      • aaaaaaaa = indicator of R_cacheserv operation

        See Table 3 for possible values.

      • bbbbbbbb = system service or internal check being performed

        See Table 4 for possible values.

      • cccccccc = return code from service bbbbbbbb
      • dddddddd = reason code from service bbbbbbbb
    • Primary symptom string return code: [0,4,8…]
    • Primary symptom string reason code: 0
  • Error occurred during REMOVE EXPIRED operation
    • Service name: CLEANUP
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORE: R18CLN ERROR
      • aaaaaaaa = indicator of R_cacheserv operation

        See Table 3 for possible values.

      • bbbbbbbb = system service or internal check being performed

        See Table 4 for possible values.

      • cccccccc = return code from service bbbbbbbb
      • dddddddd = reason code from service bbbbbbbb
    • Primary symptom string return code: [0,4,8…]
    • Primary symptom string reason code: 0
  • Error occurred during LOCATE operation
    • Service name: LOCATE
    • Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORE: R18IDX ERROR
      • aaaaaaaa = indicator of R_cacheserv operation

        See Table 3 for possible values.

      • bbbbbbbb = system service or internal check being performed

        See Table 4 for possible values.

      • cccccccc = return code from service bbbbbbbb
      • dddddddd = reason code from service bbbbbbbb
    • Primary symptom string return code: [0,4,8…]
    • Primary symptom string reason code: 0
R_cacheserv (CSECT IRRRCH22)
  • Error occurred obtaining storage for a DSG block
    • Service name: OBTAIN1
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORAGE OBTAIN FOR DSG FAILURE
      • aaaaaaaa = STORAGE OBTAIN length
      • bbbbbbbb = STORAGE OBTAIN subpool
      • cccccccc = unused
      • dddddddd = unused
    • Primary symptom string return code: storage obtain return code. See z/OS MVS Programming: Assembler Services Reference IAR-XCT for the description of the return codes for the STORAGE OBTAIN macro.
    • Primary symptom string reason code: 0
  • No active TTAB was found
    • Service name: TTAB1
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd NO ACTIVE TTAB FOUND
      • aaaaaaaa = address of the DSCA
      • bbbbbbbb = TTAB anchor
      • cccccccc = active TTAB pointer
      • dddddddd = unused
    • Primary symptom string return code: 0
    • Primary symptom string reason code: 0
  • Inconsistency found in TTAB slot
    • Service name: MEMTOKCK
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd TTAB SLOT INCONSISTENCY system-name
      • aaaaaaaa = TTAB anchor
      • bbbbbbbb = active TTAB pointer
      • cccccccc = index into the active TTAB
      • dddddddd = system token for system name
      • system-name = system name of sysplex member
    • Primary symptom string return code: 0
    • Primary symptom string reason code: 0
  • DSG is returned with either no DSGR or more than one DSGR
    • Service name: DSG2
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd DSG INCONSISTENCY FROM SYSTEM system-name
      • aaaaaaaa = DSG address
      • bbbbbbbb = DSG return code
      • cccccccc = DSGR pointer
      • dddddddd = number of responses
      • system-name = system name of sysplex member
    • Primary symptom string return code: 0
    • Primary symptom string reason code: 0
  • Error occurred when attempting intersystem communication
    • Service name: DSG1
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd UNEXPECTED DSG RC FROM SYSTEM system-name
      • aaaaaaaa = DSG address
      • bbbbbbbb = DSG return code
      • cccccccc = number of DSGs sent
      • dddddddd = DSGR pointer
      • system-name = system name of sysplex member
    • Primary symptom string return code: 0
    • Primary symptom string reason code: 0
  • Other system had either: more information to return and had a STORAGE OBTAIN error, or an unexpected error
    • Service name: IRRRCH24
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd IRRRCH24 HAD PROBLEM ON SYSTEM system-name
      • aaaaaaaa = DSG address
      • bbbbbbbb = DSGR pointer
      • cccccccc = DSGR return buffer pointer
      • dddddddd = DSGR return buffer length
      • system-name = system name of sysplex member
    • Primary symptom string return code: IRRRCH24 return code
      • 2 - BAD_OBTAIN, STORAGE OBTAIN failure
    • Primary symptom string reason code: IRRRCH24 reason code
  • The DSGR lacks a return buffer
    • Service name: DSGR1
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd DSGR LACKS RETURN BUFFER FROM system-name
      • aaaaaaaa = DSG address
      • bbbbbbbb = DSGR pointer
      • cccccccc = DSGR return buffer pointer
      • dddddddd = DSGR return buffer length
      • system-name = system name of sysplex member
    • Primary symptom string return code: 0
    • Primary symptom string reason code: 0
  • STORAGE OBTAIN failure on R_cacheserv return buffer for record name
    • Service name: OBTAIN2
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORAGE OBTAIN FOR RECORD NAME FAILURE
      • aaaaaaaa = STORAGE OBTAIN length
      • bbbbbbbb = STORAGE OBTAIN subpool
      • cccccccc = unused
      • dddddddd = unused
    • Primary symptom string return code: storage obtain return code. See z/OS MVS Programming: Assembler Services Reference IAR-XCT for the description of the return codes for the STORAGE OBTAIN macro.
    • Primary symptom string reason code: 0
  • STORAGE OBTAIN failure on R_cacheserv return buffer for date
    • Service name: OBTAIN3
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORAGE OBTAIN FOR DATA FAILURE
      • aaaaaaaa = STORAGE OBTAIN length
      • bbbbbbbb = STORAGE OBTAIN subpool
      • cccccccc = unused
      • dddddddd = unused
    • Primary symptom string return code: storage obtain return code. See z/OS MVS Programming: Assembler Services Reference IAR-XCT for the description of the return codes for the STORAGE OBTAIN macro.
    • Primary symptom string reason code: 0
  • STORAGE OBTAIN failure on R_cacheserv return buffer for source
    • Service name: OBTAIN4
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORAGE OBTAIN FOR SOURCE FAILURE
      • aaaaaaaa = STORAGE OBTAIN length
      • bbbbbbbb = STORAGE OBTAIN subpool
      • cccccccc = unused
      • dddddddd = unused
    • Primary symptom string return code: storage obtain return code. See z/OS MVS Programming: Assembler Services Reference IAR-XCT for the description of the return codes for the STORAGE OBTAIN macro.
    • Primary symptom string reason code: 0
  • Error from a R_cacheserv operation on another system
    • Service name: IRRRCH24
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd **xx password ERROR ON SYSTEM system-name
      • aaaaaaaa = R_cacheserv option
      • bbbbbbbb = unused
      • cccccccc = unused
      • dddddddd = unused
      • **xx = 1st 4 characters of input user ID
      • password = input password
      • system-name = system name of sysplex member
    • Primary symptom string return code: system-name R_cacheserv RACF return code
    • Primary symptom string reason code: system-name R_cacheserv RACF reason code
  • IRRRCH22 had an unknown return code
    • Service name: WAYOUT
    • Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd **xx password INTERNAL ERROR
      • aaaaaaaa = R_cacheserv option
      • bbbbbbbb = unused
      • cccccccc = unused
      • dddddddd = unused
      • **xx = 1st 4 characters of input user ID
      • password = input password
    • Primary symptom string return code: unexpected IRRRCH22 return code
    • Primary symptom string reason code: unexpected IRRRCH22 reason code
R_cacheserv (CSECT IRRRCH28)
  • Name/token service failure
    • Service name: IEANTCR
    • Variable data: Identifies R_cacheserv subroutine
  • ENVR object creation failure
    • Service name: IRRACM16
    • Variable data: Identifies subroutine and ACEE
  • Unexpected return code from IRRRCH18 caching function
    • Service name: type of request (locate, store, and so on)
    • Variable data: Identifies related error information
R_cacheserv (CSECT IRRRCH30)
  • Storage Obtain failure
    • Service name: OBTAINx
    • Variable data: Identifies subpool and length
  • Unexpected return code from RACF sysplex communication path
    • Service name: Identifies the failure point
    • Variable data: Identifies related error information
  • Unexpected return code from off-system cache
    • Service name: IRRRCH32
    • Variable data: system name and ICR information
R_Datalib (CSECT IRRRDL04)
  • Error determining the owning user ID for a DIGTCERT profile
    • Service name: RACXTRT
    • Variable data: The string 'Method GETUSERID failed to extract the UserID'
    • Additional variable data: The profile name
  • Error incrementing the last serial number (CERTLSER) of a DIGTCERT profile
    • Service name: RACXTRT or ICHEINTY
    • Variable data: The string 'Module IRRCDC29 failed to generate new Serial Number'
    • Additional variable data: The profile name
R_Datalib (CSECT IRRRDL06)
  • Error parsing the input certificate
    • Service name: IRRCDC03
    • Variable data: The string ‘IRRCDC03 failed to parse the certificate’
  • Error retrieving the certificate profile
    • Service name: RACMAP
    • Variable data: The string ‘RACMAP failed to retrieve the certificate profile’
    • Additional variable data: The certificate profile name
  • Error retrieving the CERTNAME repeat group from a user profile
    • Service name: RACEXTR
    • Variable data: The string ‘RACEXTR failed to retrieve the CERTNAME repeat group’
    • Additional variable data: The user name
  • Error locating the certificate in the CERTNAME repeat group
    • Service name: RACEXTR
    • Variable data: The String ‘Certificate not found in USER profile’
    • Additional variable data: The user name
  • Error retrieving the private key from the certificate profile
    • Service name: RACEXTR
    • Variable data: The string ‘RACFEXTR failed to retrieve the private key’
    • Additional variable data: The certificate profile name
  • Error adding the certificate to RACF
    • Service name: IRRCDC02
    • Variable data: The string 'IRRCDC02 Error - Certificate already exists'
    • Additional variable data: The certificate profile name
  • Error adding the certificate to RACF
    • Service name: IRRCDC02
    • Variable data: The string ‘IRRCDC02 failed to add the certificate’
    • Additional variable data: The certificate profile name
  • Error altering the certificate in RACF
    • Service name: IRRCDC05
    • Variable data: The string ‘IRRCDC05 failed to alter the certificate’
    • Additional variable data: The certificate profile name
  • Error connecting the certificate to a RACF ring
    • Service name: IRRCDC19
    • Variable data: The string ‘IRRCDC19 failed to connect the certificate’
    • Additional variable data: The certificate profile name
  • Error calling ICSF service CSNDKRR to retrieve the PKDS entry
    • Service name: CSNDKRR
    • Variable data: The string ‘CSNDKRR failed to retrieve the PKDS entry’
    • Additional variable data: The PKDS entry name
R_DCEAUTH (CSECT IRRRDA00)
  • Create ACEE failure
    • Service name: RACINIT
    • Variable data: the RACF user ID
  • Convert UUID to RACF user ID failure
    • Service name: RACXTRT
    • Variable data: the DCEUUIDS profile name
  • Check authorization failure
    • Service name: RACHECK or FASTAUTH
    • Variable data: the RACF user ID, class, profile, and access requested
  • Delete ACEE failure
    • Service name: RACINIT
    • Variable data: the ACEE address
R_DCEINFO (CSECT IRRRDI00)
  • Extract DCE fields failure
    • Service name: RACXTRT
    • Variable data: the RACF user ID and the names of the fields
  • Replace DCE fields failure
    • Service name: RACXTRT
    • Variable data: the RACF user ID and the names of the fields
R_DCERUID (CSECT IRRRUD00)
  • Extract DCEUUIDS APPLDATA failure
    • Service name: RACXTRT
    • Variable data: the DCEUUIDS profile name
R_DCEKEY (CSECT IRRRDK00)
  • Extract DCE key failure
    • Service name: RACXTRT
    • Variable data: the RACF user ID
  • Replace DCE key failure
    • Service name: RACXTRT
    • Variable data: the RACF user ID
R_DCEKEY (CSECT IRRCPT01)
  • Extract KEYSMSTR key failure
    • Service name: ICHEINTY
    • Variable data: the class and profile name
  • ICSF CSNBENC callable service failure
    • Service name: CSNBENC
    • Variable data: the RACF user ID
  • ICSF CSNBDEC callable service failure
    • Service name: CSNBDEC
    • Variable data: the RACF user ID
R_PKIserv (CSECT IRRRPX00)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIserv attempting to check a caller's authority to the service'
    • Additional variable data: The FACILITY class profile name, the ACEE address, and the user ID from the ACEE
R_PKIserv (CSECT IRRRPX02)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIserv GENCERT attempting to check a caller's authority to the service'
    • Additional variable data: The FACILITY class profile name, the ACEE address, and the user ID from the ACEE
  • Unexpected return code from RACDCERT internal subroutine IRRCDC23
    • Service name: IRRCDC23
    • Variable data: The string 'Error in R_PKIserv GENCERT attempting to call RACDCERT subroutine. Unexpected return code'
    • Additional variable data: The first 942 bytes of the RACDCERT internal work area
  • Error calling RACROUTE REQUEST=EXTRACT to retrieve the PGMRNAME field from the USER profile
    • Service name: RACXTRT
    • Variable data: The string 'Error in R_PKIserv GENCERT attempting to extract PGMRNAME field to build Common Name'
    • Additional variable data: The user ID
R_PKIserv (CSECT IRRRPX04)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIserv EXPORT attempting to check the caller's authority to the service'
    • Additional variable data: The FACILITY class profile name, the ACEE address, and the user ID from the ACEE
  • Unexpected return code from RACDCERT internal subroutine IRRCDC25
    • Service name: IRRCDC25
    • Variable data: The string 'Error in R_PKIserv EXPORT attempting to call RACDCERT subroutine. Unexpected return code'
    • Additional variable data: The first 942 bytes of the RACDCERT internal work area
R_PKIserv (CSECT IRRRPX06)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIserv GENCERT attempting to check the caller's authority to the service'
    • Additional variable data: The FACILITY class profile name, the ACEE address, and the user ID from the ACEE
  • Unexpected return code from RACDCERT internal subroutine IRRCDC27
    • Service name: IRRCDC27
    • Variable data: The string 'Error in R_PKIserv GENCERT attempting to call RACDCERT subroutine. Unexpected return code'
    • Additional variable data: The first 942 bytes of the RACDCERT internal work area
  • Error calling RACROUTE REQUEST=EXTRACT to retrieve the PGMRNAME field from the USER profile
    • Service name: RACXTRT
    • Variable data: The string 'Error in R_PKIserv GENCERT attempting to extract PGMRNAME field to build Common Name'
    • Additional variable data: The user ID
  • Error calling MVS™ Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token service failed'
    • Additional variable data: The first 942 bytes of the RACDCERT internal work area
  • Error on PC to PKI Services
    • Service name: PKIGENC
    • Variable data: The string 'PKI Services Failed for function GENCERT'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC
R_PKIserv (CSECT IRRRPX07)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIserv EXPORT attempting to check the caller's authority to the service'
    • Additional variable data: The FACILITY class profile name, the ACEE address, and the user ID from the ACEE
  • Error calling IRRCDC67 to find parent CERTAUTH chain to input certificate and build PKCS7 package.
    • Service name: IRRCDC67
    • Variable data: The string 'Error in R_PKIServ EXPORT attempting to call RACDCERT subroutine. Unexpected return code.'
    • Additional variable data: RACDCERT failing module and service in form of diagnostic data from the RACDCERT internal work area:
      • 4 bytes - internal service code
      • 4 bytes - service return code
      • 4 bytes - service reason code
      • 8 bytes - RACF class name
      • 8 bytes - RACF segment name
      • 81 bytes - blank
      • 8 bytes - csect name
      • 71 bytes - diagnostic message text
      • 4 bytes - RACF entity length
      • 4 bytes - number of extracted fields
      • 56 bytes - array of 8 byte field names (max 7 entries)
      • 256 bytes - RACF entity name
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token service failed'
    • Additional variable data: None
  • Error on PC to PKI Services
    • Service name: PKIEXPT
    • Variable data: The string 'PKI Services Failed for function EXPORT'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC
R_PKIserv (CSECT IRRRPX08)
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token service failed'
    • Additional variable data: None
  • Error on PC to PKI Services
    • Service name: PKIQRYR or PKIQRYC
    • Variable data: The string 'PKI Services Failed for function {QUERYREQS | QUERYCERTS}'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC
R_PKIserv (CSECT IRRRPX10)
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token service failed'
    • Additional variable data: None
  • Error on PC to PKI Services
    • Service name: PKICRTR or PKICRTD
    • Variable data: The string 'PKI Services Failed for function {REQDETAILS | CERTDETAILS}'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC
R_PKIserv (CSECT IRRRPX12)
  • Error on PC to PKI Services
    • Service name: PKIMODR or PKIMODC
    • Variable data: The string 'PKI Services Failed for function {MODIFYREQS | MODIFYCERTS}'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token service failed'
    • Additional variable data: None
R_PKIserv (CSECT IRRRPX13)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIServ VERIFY attempting to check the caller's authority to the service'
    • Additional variable data: The FACILITY class profile name, the ACEE address, and the user ID from the ACEE
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token service failed'
    • Additional variable data: None
  • Error on PC to PKI Services
    • Service name: PKIVERF
    • Variable data: The string 'PKI Services Failed for function VERIFY'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC
R_PKIserv (CSECT IRRRPX14)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIServ REVOKE attempting to check the caller's authority to the service'
    • Additional variable data: The FACILITY class profile name, the ACEE address, and the user ID from the ACEE
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token service failed'
    • Additional variable data: None
  • Error on PC to PKI Services
    • Service name: PKIREVOKE
    • Variable data: The string 'PKI Services Failed for function REVOKE'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC
R_PKIserv (CSECT IRRRPX15)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIServ RENEW attempting to check the caller's authority to the service'
    • Additional variable data: The FACILITY class profile name, the ACEE address, and the user ID from the ACEE
  • Error on PC to PKI Services
    • Service name: PKIRENW
    • Variable data: The string 'PKI Services Failed for function RENEW'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token service failed'
    • Additional variable data: None
R_PKIserv (CSECT IRRRPX18)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIServ RESPOND attempting to check the caller's authority to the service'
    • The FACILITY class profile name, the ACEE address, the user ID from the ACEE
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token Service, IEANTRT, failed'
    • Additional variable data: None
  • Error on PC to PKI Services
    • Service name: R_PKIServ RESPOND
    • Variable data: The string 'PKI Services failed for function RESPOND'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC.
R_PKIserv (CSECT IRRRPX20)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller's access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string 'Error in R_PKIServ SCEPREQ attempting to check the caller's authority to the service'
    • Additional variable data: The FACILITY class profile name, the ACEE address, the user ID from the ACEE
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token Service, IEANTRT, failed'
    • Additional variable data: None
  • Error on PC to PKI Services
    • Service name: R_PKIServ PKISCEP
    • Variable data: The string 'PKI Services failed for function SCEPREQ'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC.
R_PKIserv (CSECT IRRRPX22)
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT
    • Variable data: The string 'Name/Token Service, IEANTRT, failed'
    • Additional variable data: None
  • Error on PC to PKI Services
    • Service name: R_PKIServ PKIPREG
    • Variable data: The string 'PKI Services failed for function PREREGISTER'
    • Additional variable data: Additional information word returned from PKI Services (register 1) followed by the parameter list used on the PC.
R_PKIserv (CSECT IRRRPX24)
  • Error calling RACROUTE REQUEST=AUTH to determine the caller’s access to a FACILITY class profile
    • Service name: RACHECK
    • Variable data: The string ’Error in R_PKIserv QRECOVER attempting to check the caller’s authority to the service’
    • Additional variable data: The FACILITY class profile name, the ACEE address, and the user ID from the ACEE
  • Error calling MVS Name/Token Service
    • Service name: IEANTRT Error recording
    • Variable data: The string ’Name/Token service failed’
    • Additional variable data: None
  • Error on PC to PKI Services
    • Service name: PKIQREC
    • Variable data: The string ’PKI Services Failed for function QRECOVER’
    • Additional variable data: Additional information word returned from PKI Services (register 1), followed by the parameter list used on the PC
R_PgmSignVer (CSECT IRRSPS00)
  • Error with range
    • Service name: IRRRPS00
    • Variable data: Too many ranges
    • Primary symptom string return code: Index of invalid range
    • Secondary symptom string reason code: 0
  • Error with end address
    • Service name: IRRRPS00
    • Variable data: End Address before start
      Start: 0Xaaaaaaaa aaaaaaaa
      End: 0Xbbbbbbbb bbbbbbbb"
      • Aaaaaaa aaaaaaaa=start address
      • Bbbbbbbb bbbbbbbb = end address
    • Primary symptom string return code: Index of invalid range
    • Secondary symptom string reason code: 0
  • Extract error
    • Service name: SIGINIT
    • Variable data: Extract error:
      0xaaaaaaaa 
      0xbbbbbbbb 
      0xcccccccc
      • Aaaaaaaa=SAFRC
      • Bbbbbbb=RACFRC
      • Cccccccc=RACFRSN

      Primary symptom string return code: RACROUTE return code

      Secondary symptom string reason code: RACROUTE reason code

  • Error with APPLDATA algorithm
    • Service name: SIGINIT
    • Variable data: APPLDATA invalid algorithm: alg
      • Alg=What was specified in appldata
    • Primary symptom string return code: 0
    • Secondary symptom string reason code: 0
  • Error locating APPLDATA in profile
    • Service name: SIGINIT
    • Variable data: APPLDATA not found in profile
    • Primary symptom string return code: 0
    • Secondary symptom string reason code: 0
  • APPLDATA error with leading/trailing blanks
    • Service name: SIGINIT
    • Variable data: APPLDATA: Leading/Trailing blank encountered
    • Primary symptom string return code: Variable ‘I’ – Index of first blank in appldata
    • Secondary symptom string reason code: 0
  • Error with APPLDATA algorithm name
    • Service name: SIGINIT
    • Variable data: APPLDATA: algorithm name too long
    • Primary symptom string return code: Variable ‘I’ – Index of first blank in appldata
    • Secondary symptom string reason code: 0
  • RING error, ID too long
    • Service name: SIGINIT
    • Variable data: RING: / not found or ID too long
    • Primary symptom string return code: Variable ‘I’, index of ‘/’
    • Secondary symptom string reason code: Variable ‘j’ Index of ‘ ‘
  • RING error, name too long
    • Service name: SIGINIT
    • Variable data: RING: Name too long or not specified
    • Primary symptom string return code: Variable ‘I’, index of ‘/’
    • Secondary symptom string reason code: Variable ‘j’ Index of ‘ ‘
  • Key error in default certificate
    • Service name: SIGINIT
    • Variable data: No Private Key in default certificate
    • Primary symptom string return code: Number of certificates in ring
    • Secondary symptom string reason code: Index of default certificate in ring
  • Error with key analysis
    • Service name: SIGINIT
    • Variable data: Key analysis error
    • Primary symptom string return code: RC from analysisKey() routine
    • Secondary symptom string reason code: 0
  • Error with number of certificates in ring
    • Service name: SIGINIT
    • Variable data: Too many certificates in ring
    • Primary symptom string return code: Number of certificates in ring
    • Secondary symptom string reason code: 0
  • Error with ring default certificate
    • Service name: SIGINIT
    • Variable data: No default certificate found in ring
    • Primary symptom string return code: 0
    • Secondary symptom string reason code: 0
  • Error with certificate ordering
    • Service name: SIGINIT
    • Variable data: Certificate ordering error
    • Primary symptom string return code: RC from OrderPKCS7CA
    • Secondary symptom string reason code: 0
  • Error with trust chain length
    • Service name: SIGINIT
    • Variable data: Trust chain too long
    • Primary symptom string return code: Number of items in trust chain
    • Secondary symptom string reason code: 0
  • Error with R_datalib
    • Service name: SIGINIT
    • Variable data: R_datalib error:
      Function Code X,
      RC=0Xaaaaaaaa 0Xbbbbbbbb 0Xcccccccc
    • Primary symptom string return code: R_datalib Function code
    • Secondary symptom string reason code: R_datalib SAFRC
  • Digest failure error
    • Service name: IRRRPS21
    • Variable data: Digest failure
    • Primary symptom string return code: 0
    • Secondary symptom string reason code: 0
  • Digest failure 2 error
    • Service name: IRRRPS21
    • Variable data: Digest failure 2
    • Primary symptom string return code: 0
    • Secondary symptom string reason code: 0
  • Number of ranges error
    • Service name: IRRRPS21
    • Variable data: Too many ranges
    • Primary symptom string return code: # specified ranges
    • Secondary symptom string reason code: 0
  • Error with end address
    • Service name: IRRRPS21
    • Variable data: End address before start:
      Start: 0Xaaaaaaaa aaaaaaaa 
      End: 0Xbbbbbbbb bbbbbbbb"
      • Aaaaaaa aaaaaaaa=start address
      • Bbbbbbbb bbbbbbbb = end address
    • Primary symptom string return code: Failing range index
    • Secondary symptom string reason code: 0
  • Context error
    • Service name: IRRRPS21
    • Variable data: New context
    • Primary symptom string return code: CLiC rc
    • Secondary symptom string reason code: 0
  • New digest error
    • Service name: IRRRPS21
    • Variable data: New digest
    • Primary symptom string return code: CLiC rc
    • Secondary symptom string reason code: 0
  • Digest update error
    • Service name: IRRRPS21
    • Variable data: Digest update
    • Primary symptom string return code: CLiC rc
    • Secondary symptom string reason code: 0
  • Digest update 2 error
    • Service name: IRRRPS21
    • Variable data: Digest update 2
    • Primary symptom string return code: CLiC rc
    • Secondary symptom string reason code: 0
  • New context error
    • Service name: IRRRPS31
    • Variable data: New context
    • Primary symptom string return code: CLiC rc
    • Secondary symptom string reason code: 0
  • Pk service error
    • Service name: IRRRPS31
    • Variable data: Pk service
    • Primary symptom string return code: CLiC rc
    • Secondary symptom string reason code: 0
  • Rsa sign error
    • Service name: IRRRPS31
    • Variable data: Rsa sign
    • Primary symptom string return code: CLiC rc
    • Secondary symptom string reason code: 0
  • Rsa verify error
    • Service name: IRRRPS31
    • Variable data: Rsa verify
    • Primary symptom string return code: CLiC rc
    • Secondary symptom string reason code: 0
  • Decode failure 1 error
    • Service name: IRRRPS51
    • Variable data: Decode Failure 1
    • Primary symptom string return code: RC from decodeSimple()
    • Secondary symptom string reason code: 0
  • Decode failure 2 error
    • Service name: IRRRPS51
    • Variable data: Decode Failure 2
      aaaaaaaa bbbbbbbb cccccccc dddddddd
      eeeeeeee ffffffff gggggggg hhhhhhhh iiiiiiiiI 
    • Primary symptom string return code: 0
    • Secondary symptom string reason code: 0
  • Decode failure 3 error
    • Service name: IRRRPS51
    • Variable data: Decode Failure 3 (hex data)
    • Primary symptom string return code: 0
    • Secondary symptom string reason code: 0
  • Decode failure 4 error
    • Service name: IRRRPS51
    • Variable data: Decode failure 4
    • Primary symptom string return code: RC from DecodeSimple
    • Secondary symptom string reason code: 0
  • Decode failure 5 error
    • Service name: IRRRPS51
    • Variable data: Decode failure 5
    • Primary symptom string return code: RC from analysiskey()
    • Secondary symptom string reason code: 0
  • Decode failure 6 error
    • Service name: IRRRPS51
    • Variable data: Decode failure 6
    • Primary symptom string return code: Value of variable seqCount should be 5
    • Secondary symptom string reason code: 0
  • Error with signature algorithm
    • Service name: VERFINAL
    • Variable data: Unsupported signature algorithm
    • Primary symptom string return code: Value of CxSignAlg
    • Secondary symptom string reason code: 0
  • APPLDATA format error
    • Service name: VERFINAL
    • Variable data: Appldata format error:
       #### aaaaa
    • Primary symptom string return code: Variable BlankPos: Index of ‘ ‘ in Appldata
    • Secondary symptom string reason code: Variable DelimPos: index of ‘/’ in ApplData
  • Extract error
    • Service name: VERFINAL
    • Variable data: Extract Error:
      0xaaaaaaaa 
      0xbbbbbbbb 
      0xcccccccc
      • Aaaaaaa=safrc
      • Bbbbbbbb=racfrc
      • Cccccccc=racfrsn
    • Primary symptom string return code: RACROUTE
    • Secondary symptom string reason code: RACROUTE
  • Decode X509 error
    • Service name: VERFINAL
    • Variable data: Decode X509 error
    • Primary symptom string return code: RC from Decode X509
    • Secondary symptom string reason code: Certificate number (I loop index)
  • SetCertificate error
    • Service name: VERFINAL
    • Variable data: SetCertificate Error
    • Primary symptom string return code: RC from SetCertificate
    • Secondary symptom string reason code: Certificate number
  • R_datalib error
    • Service name: VERFINAL
    • Variable data: R_datalib error:
      Function code aaaaaaaa, 
      RC=0xbbbbbbbb 0xcccccccc 0xdddddddd
      • Aaaaaaaa=r_datalib func code
      • Bbbbbbbb=saf RC from r_datalib
      • Cccccccc=RACFRC from r_datalib
      • Dddddddd=RACFRsn from r_datalib
    • Primary symptom string return code: R_datalib function code
    • Secondary symptom string reason code: R_datalib RC
R_proxyserv (CSECT IRRRPY00)
  • Name/token service failure
    • Service name: IEANTRT
    • Variable data: The string "Name/token service failure"
    • Additional variable data: The name for the requested token
R_proxyserv (CSECT IRRRPY01 and IRRRPY02)
  • Error response from LDAP
    • Service name: LDAP
    • Variable data: Up to 100 bytes of the LDAP error message
  • LDAP message response decoding failure
    • Service name: LDAPMSG
    • Variable data: One of the following strings –
      • "Error in LDAP message – Incorrect ASN.1 syntax"
      • "Error in LDAP message – Expected field not found"
      • "Error in LDAP message – Unsupported character set detected"
    • Additional variable data: Up to 1024 bytes of the returned LDAP message
R_proxyserv (CSECT IRRCPT01)
  • Extract KEYSMSTR key failure
    • Service name: ICHEINTY
    • Variable data: the class and profile name
  • ICSF CSNBENC callable service failure
    • Service name: CSNBENC
    • Variable data: the RACF user ID
  • ICSF CSNBDEC callable service failure
    • Service name: CSNBDEC
    • Variable data: the RACF user ID
R_admin (CSECT IRRREQ00)
  • The R_admin callable service uses the RACF subsystem address space. RACF command images generated by the callable service or by the caller are passed to the RACF subsystem for execution by invoking the internal macro IRRREQ. The IRRREQ macro uses the IEFSSREQ macro to communicate with the RACF subsystem.
    In this environment the following errors could occur:
    • IRRREQ is unable to communicate with the RACF subsystem (for example, the RACF subsystem is not started).
    • IRRREQ is able to communicate with the RACF subsystem, but the RACF command fails in the RACF subsystem (for example, an ADDUSER command specifying a class that is not valid).
  • The R_admin callable service differentiates between these two errors. For the first error, the callable service returns a SAF return code of 8, a RACF return code of 12, and a RACF reason code set equal to the return code from IEFSSREQ. For the second error, the callable service returns a SAF return code of 8, a RACF return code of 16, and a RACF reason code set equal to the return code returned from the command's execution in the RACF subsystem. Additionally, the R_admin callable service writes symptom records to SYS1.LOGREC for the errors. The symptom records contain the following information:
    • Primary symptom string:
      • Component identifier (PIDS) - 5752XXH00
      • 1st return code (PRCS) - RACF return code from the callable service
      • 2nd return code (PRCS) - RACF reason code from the callable service
      • Csect routine identifier (RIDS) - IRRREQ00
      • Loadmod routine identifier (RIDS) - IRRRFR10#L
    • Secondary symptom string:
      • Storage address (ADRS) - Error offset into IRRREQ00
    • Free format component information: Specific to the error
    For the first error (unable to communicate with the RACF subsystem), RACF records the following additional information in the free format area:
    Table 5. Additional information
    Offset Length Description
    0 1 R_admin callable service function requested
    1 4 Address of the command image to be executed
    5 2 Length of the command image to be executed

    Figure 5 shows an example of a symptom record created when the R_admin callable service is unable to communicate with the RACF subsystem.

    Figure 5. An example of a symptom record when the callable service cannot communicate with RACF
    TYPE: SYMPTOM RECORD  REPORT: SOFTWARE EDIT REPORT  DAY YEAR
                                           REPORT DATE: 348  96
    SCP:   VS 2 REL 3                       ERROR DATE: 348  96
                          MODEL:  4381                            HH MM SS.TH
                          SERIAL: 111606                    TIME: 15:24:51.20
    SEARCH ARGUMENT ABSTRACT:
        PIDS/5752XXH00 PRCS/0000000C PRCS/00000004 RIDS/IRRREQ00
        RIDS/IRRRFR10#L
    
    SYSTEM ENVIRONMENT:
        CPU MODEL:  4381               DATE:  348  96
        CPU SERIAL: 111606             TIME:  15:24:51.20
        SYSTEM:     NODE1              BCP:   MVS
        RELEASE LEVEL OF SERVICE ROUTINE:      JBB6604
        SYSTEM DATA AT ARCHITECTURE LEVEL:     10
        COMPONENT DATA AT ARCHITECTURE LEVEL:  10
        SYSTEM DATA:  00000000 00000000    |........|
    COMPONENT INFORMATION:
        COMPONENT ID:             5752XXH00
        COMPONENT RELEASE LEVEL:  240
        SERVICE RELEASE LEVEL:    HRF2240
        DESCRIPTION OF FUNCTION:  RACF z/OS UNIX SYSTEM CALLABLE SERV.
        PROBLEM ID:               IRRREQ
    
    PRIMARY SYMPTOM STRING:
        PIDS/5752XXH00 PRCS/0000000C PRCS/00000004 RIDS/IRRREQ00
        RIDS/IRRRFR10#L
    
        SYMPTOM            SYMPTOM DATA     EXPLANATION
        ---------------    -------------    -----------
        PIDS/5752XXH00     5752XXH00        COMPONENT IDENTIFIER
        PRCS/0000000C      0000000C         RETURN CODE
        PRCS/00000004      00000004         RETURN CODE
        RIDS/IRRREQ00      IRRREQ00         ROUTINE IDENTIFIER
        RIDS/IRRRFR10#L    IRRRFR10#L       ROUTINE IDENTIFIER
    
    SECONDARY SYMPTOM STRING:
        ADRS/00000734
    
        SYMPTOM            SYMPTOM DATA     EXPLANATION
        ---------------    -------------    -----------
    
        ADRS/00000734      00000734         STORAGE ADDRESS
    
    FREE FORMAT COMPONENT INFORMATION:
     KEY = F000     LENGTH = 000100 (0064)
    +000   0204803C    A2000D40    40404040    40404040    |....S..         |
    +010 LENGTH(0080) ==> ALL BYTES CONTAIN X'40'.
    +060   40404040                                        |                |

    The IRRREQ (IEFSSREQ) return code is 4. Looking at the free format component information, the first byte has a value of X'02', indicating this was an ADMN_DEL_USER request. The next 4 bytes contain the address of the generated command image (X'04803CA2'). The sixth and seventh bytes contain the two byte length of the generated command image (X'000D').

    For the second error (execution of the RACF command failed), the main intent of the symptom record is to capture the command image that was executed, because it might not be available elsewhere. Therefore, to limit the amount of user error information written to SYS1.LOGREC, RACF does not write symptom records for ADMN_RUN_COMD requests that fail. RACF also does not write symptom records for ADMN_ADD_USER requests where the RACF user ID exists and ADMN_DEL_USER requests where the RACF user ID does not exist. For the cases where RACF does write a symptom record, the following additional information is recorded in the free format area:
    • First X'64' byte area–Command message output (if any). This is the first message text string only and is truncated if it exceeds X'64' bytes in length.
    • Next four X'100' byte areas–A copy of the command image that was executed. The command image is truncated if it exceeds 1024 (decimal) bytes in length.
    You can trace the R_admin callable service to obtain information not included in the symptom records. For information about tracing, see Tracing the R_admin callable service.

    Figure 6 shows an example of a symptom record created when the R_admin callable service is able to communicate with the RACF subsystem, but the command fails.

    Figure 6. An example of a symptom record when a command fails
    TYPE: SYMPTOM RECORD      REPORT: SOFTWARE EDIT REPORT  DAY YEAR
                              REPORT DATE:     014  97
    SCP:   VS 2 REL 3         ERROR DATE:      014  97
                              MODEL:  4381     HH   MM   SS.TH
                              SERIAL: 111606   TIME: 10:24:10.11
    SEARCH ARGUMENT ABSTRACT:
        PIDS/5752XXH00 PRCS/00000010 PRCS/00000008 RIDS/IRRREQ00
        RIDS/IRRRFR10#L
        SYSTEM ENVIRONMENT:
        CPU MODEL:  4381               DATE:  014  97
        CPU SERIAL: 111606             TIME:  10:24:10.11
        SYSTEM:     NODE1              BCP:   MVS
        RELEASE LEVEL OF SERVICE ROUTINE:      JBB6604
        SYSTEM DATA AT ARCHITECTURE LEVEL:     10
        COMPONENT DATA AT ARCHITECTURE LEVEL:  10
        SYSTEM DATA:  00000000 00000000    |........|
    COMPONENT INFORMATION:
        COMPONENT ID:             5752XXH00
        COMPONENT RELEASE LEVEL:  240
        SERVICE RELEASE LEVEL:    HRF2240
        DESCRIPTION OF FUNCTION:  RACF z/OS UNIX SYSTEM CALLABLE SERV.
        PROBLEM ID:               IRRREQ
        PRIMARY SYMPTOM STRING:
        PIDS/5752XXH00 PRCS/00000010 PRCS/00000008 RIDS/IRRREQ00
        RIDS/IRRRFR10#L
        SYMPTOM            SYMPTOM DATA     EXPLANATION
        ---------------    -------------    -----------
        PIDS/5752XXH00     5752XXH00        COMPONENT IDENTIFIER
        PRCS/00000010      00000010         RETURN CODE
        PRCS/00000008      00000008         RETURN CODE
        RIDS/IRRREQ00      IRRREQ00         ROUTINE IDENTIFIER
        RIDS/IRRRFR10#L    IRRRFR10#L       ROUTINE IDENTIFIER
        SECONDARY SYMPTOM STRING:
        ADRS/00000748
    
        SYMPTOM            SYMPTOM DATA     EXPLANATION
        ---------------    -------------    -----------
    
        ADRS/00000748      00000748         STORAGE ADDRESS
     FREE FORMAT COMPONENT INFORMATION:
     KEY = F000     LENGTH = 000100 (0064)
    +000   C9D2D1F5    F6F7F0F2    C940C9D5    E5C1D3C9    |IKJ56702I INVALI|
    +010   C440C3D3    C1E2E240    D5C1D4C5    6B40C2C1    |D CLASS NAME, BA|
    +020   C4C3D3C1    E2E24040    40404040    40404040    |DCLASS          |
    +030 LENGTH(0048) ==> ALL BYTES CONTAIN X'40'.
    +060    40404040                                       |                |
    
     KEY = F000     LENGTH = 000256 (0100)
    +000    C1C4C4E4    E2C5D940    C7E4D4C2    E8404040   |ADDUSER GUMBY   |
    +010    4040D5C1    D4C54040    40404040    40404D7D   |  NAME        ('|
    +020    D1968895    40D84B40    C7A49482    A87D5D40   |JOHN Q. GUMBY') |
    +030    404040C3    D3C1E4E3    C8404040    4040404D   |   CLAUTH      (|
    +040    82818483    9381A2A2    5D40D7C1    E2E2E6D6   |BADCLASS) PASSWO|
    +050    D9C44040    40404DA7    A7A75D40    C1C4C4C3   |RD    (XXX) ADDC|
    +060    C1E3C5C7    D6D9E840    4040404D    8381A3F1   |ATEGORY    (CAT1|
    +070    5D404040    40404040    40404040    40404040   |)               |
    +080 LENGTH(0128) ==> ALL BYTES CONTAIN X'40'.

    In this example, the RACF subsystem return code is 8. In the free format component information, the first X'64' byte area contains the diagnostic message ("IKJ56702I INVALID CLASS NAME, BADCLASS") produced by executing the command image. The next four X'100' areas (only 1 in this case) contain the command image itself (ADDUSER GUMBY NAME('JOHN Q. GUMBY') CLAUTH(BADCLASS) PASSWORD(XXX) ADDCATEGORY(CAT1)). Note that the actual password value is not recorded.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014