Previous topic |
Next topic |
Contents |
Contact z/OS |
Library |
PDF
ICH10318I z/OS Security Server RACF Messages and Codes SA23-2291-00 |
|
ICH10318I Profile cannot be created in the class-name-1 class
because profile class-name-2 has been deleted from
the CDT class. ExplanationYou tried to define a profile in the class-name-1 class, but it was unsuccessful because that profile is related to a dynamic class that is being deleted. The class-name-2 class is present in the dynamic class descriptor table, but the class definition (the profile class-name-2 in the CDT class) is deleted from the CDT class. When the SETROPTS RACLIST(CDT) REFRESH command is issued or the system is restarted, the class is removed from the dynamic class descriptor table. Therefore, no profiles may be added that are in the class-name-2 class or that are related to the class-name-2 class. For
example, you tried to define a profile in the HORSES8 class, and received
the following message:
This means that the system administrator is planning to remove the HORSES8 class from the class descriptor table, and as part of the removal, has already deleted the HORSES8 profile from the CDT class. Since the HORSES8 profile in the CDT class contained the definition of the HORSES8 dynamic class, profiles may no longer be added to the HORSES8 class. As another example, you tried to define a profile named HORSES8 in the GLOBAL class (RDEFINE GLOBAL HORSES8), and received the following message:
Again, this means that the system administrator is planning to remove the HORSES8 class from the class descriptor table, and as part of the removal, deleted the HORSES8 profile from the CDT class. Since the HORSES8 profile in the GLOBAL class depends on the definition of the HORSES8 dynamic class, the HORSES8 profile may not be added to the GLOBAL class. System actionCommand processing is halted, and the profile is not added to the RACF® database. If several profile names were specified on the command and class-name-1 and class-name-2 are the same, none of the profiles are added to the RACF database. User responseIf you intend to define the profile in the class-name-1 class, you must first define the class-name-2 class and its class attributes in the CDT class, issue the SETROPTS RACLIST(CDT) REFRESH command, and then issue the command again. For more information about adding a class to the dynamic class descriptor table, see z/OS Security Server RACF Security Administrator's Guide. |
Copyright IBM Corporation 1990, 2014
|