z/OS Security Server RACF Diagnosis Guide
Previous topic |
Next topic
|
Contents
|
Contact z/OS
|
Library
|
PDF
Contents (exploded view)
z/OS Security Server RACF Diagnosis Guide
GA32-0886-00
Abstract for z/OS Security Server RACF Diagnosis Guide
z/OS Version 2 Release 1 summary of changes
Starting diagnosis
Planning for problem diagnosis
Troubleshooting the problem
Diagnosis hints
Making sure this is a RACF problem
Common usage problems with RACF macros and utilities
Utilities
IRRUT100 Utility
IRRUT200 Utility
IRRUT400 Utility
IRRDBU00 Utility
IRRRID00 Utility
RACF report writer utility (RACFRW)
IRRIRA00
RACF macros
General
ICHEINTY macro
RACROUTE macro
Troubleshooting tables for problems in RACF
Using the troubleshooting tables
Before you begin:
Troubleshooting tables
Abend troubleshooting table
Documentation troubleshooting table
Incorrect output troubleshooting table
Logon problems troubleshooting table
Loops troubleshooting table
Messages troubleshooting table
Performance problems troubleshooting table
RACF return codes troubleshooting table
Waits troubleshooting table
Performing a preliminary search for a matching problem
Introduction to searching for a matching problem
Related information
Steps for searching for a matching problem
Examples of search arguments for RACF
Collecting and analyzing problem data
Collecting problem data
Obtaining a description of a RACF installation
Obtaining a system dump
Prerequisites
How to obtain a system dump
Formatting a system dump
Prerequisites
How to format a system dump
Obtaining RACF return codes and reason codes from a RACF macro invocation
Obtaining RACF return codes and reason codes from a RACF callable service invocation
Obtaining traces
Obtaining traces for program control and Program Access to Data Set (PADS) errors
Trace examples
Trace example 1
Trace example 2
Special consideration when REXX is involved
Special consideration when using IMS
Obtaining traces on z/OS UNIX System Services
Obtaining information about z/OS UNIX file and directory violations
Correcting the permissions when access is denied
Obtaining trace records using the SET TRACE command
Command tracing
Example of command tracing
Tracing GENERICANCHOR
Tracing the R_admin callable service
Tracing the Callable Services, RACROUTE, and RACF Database Manager Request calls
Reading a trace output
Explaining trace header information
Tables
Examples of trace output
Callable Service
RACROUTE REQUEST=VERIFY
MANAGER ALTER
Validating input
Identifying the caller of RACF
Prerequisites
Introduction to procedure
Procedure
Alternative procedure
Checking the parameter list passed to RACF
Prerequisites
How to check the parameter list passed to RACF
Alternative procedure to check the parameter list passed to RACF
Searching for a Match
Prerequisites
How to search for a matching problem
Application Identity Mapping Considerations
LOGREC data set entries for the alias index
Recovering from errors with Application Identity Mapping
Using SAF Trace to debug IBM HTTP server problems
Before you begin
Starting the trace
The order of trace calls
Examples of each of the post records
Using the trace to find problems
Reporting Problems to IBM
Prerequisites
Introduction to reporting RACF problems to IBM
How to report RACF problems to IBM
Troubleshooting your RACF database
Format of the RACF database
Header block (ICB)
Templates
Segment table block
BAM blocks
BAM block header
BAM block masks
Index blocks
Alias index blocks
Overview
Index block header
Index entries
Sequence set chain pointer entry
X'0C' delimiter
Index-Entry offset table
Profiles
Example of a profile
Database Unload Utility for a RACF Database (IRRDBU00)
Block Update command for a RACF database (BLKUPD)
Considerations for using BLKUPD
Hierarchy of the BLKUPD command
Using the BLKUPD command
Working with the RACF database
The LOCATE subcommand
The READ subcommand
Using the subcommands of READ
The FIND subcommand
The LIST subcommand
The FORMAT subcommand
The REP subcommand
The DISPLAY subcommand
Using the Subcommands of DISPLAY
The CHANGE subcommand of DISPLAY
The INSERT subcommand of DISPLAY
The NEXT subcommand of DISPLAY
The DELETE subcommand of DISPLAY
The END subcommand of DISPLAY
The REREAD subcommand
The END subcommand of READ
The END subcommand of BLKUPD
The BLKUPD command—A scenario
Error recovery for RACF Remote Sharing Facility (RRSF)
Types of errors in an RRSF environment
Definition errors
Environmental errors
Program errors
Transmission and line errors
Handshaking and state changes
Connection states of RRSF nodes
Connection state changes after a successful TARGET command
Actions to recover from an RRSF failure
RRSF ESTAE processing
Failure of MVS system service
VSAM failures
Automatic direction and VSAM errors
Password synchronization and VSAM failures
IRRBRW00 utility and VSAM data sets
Node communications
TCP/IP errors
Connection processing during system IPL
TCP/IP return code handling
Network connectivity issues
AT-TLS errors
Obtaining information about RRSF connections
Obtaining AT-TLS information for an RRSF connection
APPC errors
Initializing of connections
APPC return code handling
APPC missing interrupts
General errors
APPC or TCP/IP and the RACF RESTART command
Deleted node
Recording of errors
Creation of LOGREC data set entries
Diagnosis reference for RACF
Parameter list descriptions
RACROUTE parameter list
AUDIT service parameter list
AUTH service parameter list
DEFINE service parameter list
DIRAUTH service parameter list
EXTRACT service parameter list
FASTAUTH service parameter list
LIST service parameter list
SIGNON service parameter list
STAT service parameter list
TOKENBLD service parameter list
TOKENMAP/TOKENXTR service parameter list
VERIFY/VERIFYX service parameter list
ICHEINTY parameter list
Process flows for RACF
Process flow for RACF commands
Process flow for RACF directed commands
Process flow for RACF macros
Process flow for RACF installation exits
Process flow for RACF utilities
Process flow for the RACF report writer
Process flow for SMF data unload utility (IRRADU00)
Process flow for RACF callable services
Error recording for callable services
Variable data recorded by RACF callable services
Control block overviews for RACF
RCVT and SAF router vector table
ACEE and related control blocks
SVC dump title descriptions
SVC failure (ICHRST00)
RACF initialization failure (ICHSEC02)
RACLIST failure (IRRCOP10)
RACF COPY RACGLIST failure (IRRRLS12)
RACF CREATE RACGLIST failure (IRRRLS13)
RACF DELETE RACGLIST failure (IRRRLS14)
RACF data space recovery failure (IRRRLS15)
RACF subsystem failures (IRRSSC01, IRRSSS01, and IRRLOG00)
Persistent verification failures
RACF I/O failures
RACF index block error
Dump title description for Callable Services
Dump titles for the RACF/DB2 external security module
RACF/DB2 external security module diagnostic information
VRA keys provided by RACF for some abends
Front-ending RACF commands
Command processing changes
Considerations if writing a command front-end processor
The DEBUG command
Error recovery for RACF sysplex data sharing
Actions to recover from a coupling facility error
The Inventory Control Block (ICB)
Constants
Cross reference
The Security Product Trace Area (SAFT)
IPCS formatting for RACF control blocks
Using the VERBX RACFDATA command
Using the SUMMARY FORMAT command
Using the control block formatters
Copyright IBM Corporation 1990, 2014
z/OS Security Server RACF Diagnosis Guide
z/OS Security Server RACF Diagnosis Guide
Copyright IBM Corporation 1990, 2014
