z/OS Security Server RACF Messages and Codes
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


IRRL0003I

z/OS Security Server RACF Messages and Codes
SA23-2291-00

IRRL0003I
RACLIST of class classname failed. {Profile | Grouping Class Profile | Group Member} pname is too large.

Explanation

While processing a SETROPTS RACLIST [REFRESH] or RACROUTE REQUEST=LIST request for a class, the in-storage profile pname being built from one of the following was too large to be RACLISTed:

  • A profile in class classname
  • A profile in the grouping class associated with classname
  • A member of one or more grouping class profiles associated with classname

    If pname is followed by the notation '(G)', it is a generic profile.

System action

The RACLIST [REFRESH] request failed with SAF return code = X'08', RACF® return code = X'0C', RACF reason code = X'00'.

Operator response

Report this message to the RACF security administrator.

System programmer response

See User Response.

User response

The in-storage profile pname was too large to be RACLISTed.

If the profile is defined to RACF in more than one way, for example, as a member of a grouping class profile and as a profile in the corresponding member class, RACF merges the multiple definitions to form a resulting in-storage profile. It may be the combination of the two or more definitions of the profile, not the individual definitions themselves, that caused the profile to be too large.

If pname is identified as a group member in the message, you can issue the RLIST classname pname RESGROUP command to locate all the grouping class profiles that have it as a member.

Decrease the size of the profile (or its associated profiles). The standard and conditional access lists are the most likely areas to cause the profile to grow. Other areas to consider are the installation data, the application data, or categories.

After you have made the profile smaller, reissue the SETROPTS RACLIST command or have the application reissue the RACROUTE REQUEST=LIST request. If the profile is generic, issue the SETROPTS GENERIC(classname) REFRESH command.

Note: If you are not responsible for administering those profiles, you should contact the RACF security administrator.

For more information about the size restriction of an in-storage profile, see topic in the z/OS Security Server RACF Security Administrator's Guide on "Limiting the Size of Your Access Lists".

Routing code

2 and 11

Descriptor code

6

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014