Previous topic |
Next topic |
Contents |
Contact z/OS |
Library |
PDF
ICH10320I z/OS Security Server RACF Messages and Codes SA23-2291-00 |
|
ICH10320I WARNING: RACFVARS varname has a member that is a
prefix of another member. Authorization checking may not be as expected. ExplanationWhen RACF® compares a resource name with a profile name containing RACFVARS, it compares the resource name with each name in the RACFVARS member list on the database. The member names are arranged in the order entered by RDEF and RALT. The oldest member name (the first name in the member list) is checked first and the last member name is checked last. Each character of the resource name is compared with each character of the RACFVARS member name. The search stops at the first match of a sequence of characters in the resource name and a RACFVARS member name. This method of checking can cause unexpected results, for example, if the member list contains names that are a subset of other members in the list. In this case, the resource name does not match the expected profile name. System actionCommand completes successfully. User responseNotify the system administrator to review and change member names, if necessary. RACF Security Administrator ResponseUpdate the member names as appropriate. See z/OS Security Server RACF Security Administrator's Guide, for more information about RACFVARS considerations. To
delete RACFVARS members from an existing member list, use the RALTER
command with the DELMEM operand. To reorder a RACFVARS member list,
delete the variable by using RDELETE, and redefine it. To list a RACFVARS
member list, use the RLIST command.
Note: The RLIST command lists
the members of the RACFVARS in alphabetic order, not in the order
entered. You can also run the IRRDBU00 data base unload utility
and look at the order of the unloaded member data.
|
Copyright IBM Corporation 1990, 2014
|