z/OS Security Server RACF Messages and Codes
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


ICH10320I

z/OS Security Server RACF Messages and Codes
SA23-2291-00

ICH10320I
WARNING: RACFVARS varname has a member that is a prefix of another member. Authorization checking may not be as expected.

Explanation

When RACF® compares a resource name with a profile name containing RACFVARS, it compares the resource name with each name in the RACFVARS member list on the database. The member names are arranged in the order entered by RDEF and RALT. The oldest member name (the first name in the member list) is checked first and the last member name is checked last. Each character of the resource name is compared with each character of the RACFVARS member name. The search stops at the first match of a sequence of characters in the resource name and a RACFVARS member name.

This method of checking can cause unexpected results, for example, if the member list contains names that are a subset of other members in the list. In this case, the resource name does not match the expected profile name.

System action

Command completes successfully.

User response

Notify the system administrator to review and change member names, if necessary.

RACF Security Administrator Response

Update the member names as appropriate. See z/OS Security Server RACF Security Administrator's Guide, for more information about RACFVARS considerations.

To delete RACFVARS members from an existing member list, use the RALTER command with the DELMEM operand. To reorder a RACFVARS member list, delete the variable by using RDELETE, and redefine it. To list a RACFVARS member list, use the RLIST command.
Note: The RLIST command lists the members of the RACFVARS in alphabetic order, not in the order entered. You can also run the IRRDBU00 data base unload utility and look at the order of the unloaded member data.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014