RACF mapping problem during identity propagation

Symptom

The following message appears in the IBM® z/OS® system log:

ICH408I USER userid GROUP group NAME userid owner DISTRIBUTED IDENTITY IS NOT DEFINED: distinguished_name realm_name

Probable cause

RACF does not contain a mapping that associates the distinguished name of the user with a RACF user ID.

Action

If the user is permitted to access the CICS® resources, create a RACF mapping that includes the distinguished name of this user. For more information see Configuring RACF for identity propagation.Configuring RACF for identity propagation in the CICS Transaction Server documentation at: https://publib.boulder.ibm.com/infocenter/cicsts/v4r1/index.jsp