z/OS Security Server RACF Messages and Codes
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


ICH10318I

z/OS Security Server RACF Messages and Codes
SA23-2291-00

ICH10318I
Profile cannot be created in the class-name-1 class because profile class-name-2 has been deleted from the CDT class.

Explanation

You tried to define a profile in the class-name-1 class, but it was unsuccessful because that profile is related to a dynamic class that is being deleted. The class-name-2 class is present in the dynamic class descriptor table, but the class definition (the profile class-name-2 in the CDT class) is deleted from the CDT class. When the SETROPTS RACLIST(CDT) REFRESH command is issued or the system is restarted, the class is removed from the dynamic class descriptor table. Therefore, no profiles may be added that are in the class-name-2 class or that are related to the class-name-2 class.

For example, you tried to define a profile in the HORSES8 class, and received the following message:
ICH10318I Profile cannot be created in the HORSES8
class because the profile HORSES8 has been deleted
from the CDT class.

This means that the system administrator is planning to remove the HORSES8 class from the class descriptor table, and as part of the removal, has already deleted the HORSES8 profile from the CDT class. Since the HORSES8 profile in the CDT class contained the definition of the HORSES8 dynamic class, profiles may no longer be added to the HORSES8 class.

As another example, you tried to define a profile named HORSES8 in the GLOBAL class (RDEFINE GLOBAL HORSES8), and received the following message:

ICH10318I Profile cannot be created in the GLOBAL
class because the profile HORSES8 has been
deleted from the CDT class.

Again, this means that the system administrator is planning to remove the HORSES8 class from the class descriptor table, and as part of the removal, deleted the HORSES8 profile from the CDT class. Since the HORSES8 profile in the GLOBAL class depends on the definition of the HORSES8 dynamic class, the HORSES8 profile may not be added to the GLOBAL class.

System action

Command processing is halted, and the profile is not added to the RACF® database. If several profile names were specified on the command and class-name-1 and class-name-2 are the same, none of the profiles are added to the RACF database.

User response

If you intend to define the profile in the class-name-1 class, you must first define the class-name-2 class and its class attributes in the CDT class, issue the SETROPTS RACLIST(CDT) REFRESH command, and then issue the command again. For more information about adding a class to the dynamic class descriptor table, see z/OS Security Server RACF Security Administrator's Guide.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014