z/OS Security Server RACF System Programmer's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Expansion-time invocation of IRRACX01

z/OS Security Server RACF System Programmer's Guide
SA23-2287-00

Expansion-time invocation of IRRACX01 occurs only if the IRRACX01 exit returned a range table at compression time. This invocation allows IRRACX01 to properly rebuild the data structure, pointed to by ACEEIEP, from data passed to the exit by the range table.

The pointers in the range table point to the actual data that needs to be rebuilt into the data structure that existed before the ACEE was compressed. The saved range table is returned to the IRRACX01 exit, with updated data addresses.

RACF® frees or reuses the range table and the referenced data areas in subsequent processing. The exit should not free them or change them.

The exit should copy the information that is pointed to by the range table into a data structure that the exit GETMAINs. (The logic to accomplish this should already be present, in most cases, in the ICHRIX01 exit that creates the information in the original ACEEIEP field.)

Note: MCS, in a sysplex configuration, can create a security environment using data from another system. ACEEXNVR is set on in the ACEE to indicate this. User exits should take the system of origin into consideration when processing the exit data.

When recreating ACEEIEP data in IRRACX01, you should realize that ICHRIX01 might not get control, and you might need to duplicate some of its function in IRRACX01. ("Fastpath" through RACROUTE does not go through ICHRIX01. See the description of RACROUTE REQUEST=VERIFY,SYSTEM=YES in z/OS Security Server RACROUTE Macro Reference.)

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014