The XAPLDIAG output parameter

The output parameter XAPLDIAG is used to contain return codes and reason codes.

When a RACROUTE REQUEST=FASTAUTH check fails to grant access, the RACF access control module records the failing SAF return code, RACF return code, and RACF reason code in XAPLDIAG. Each word of XAPLDIAG contains a FASTAUTH SAF return code (1 byte), the RACF return code (1 byte) and the RACF reason code (2 bytes), from left to right. All return codes and reason codes are shown in hexadecimal. In this way, Db2 or other programs have a way to trap and obtain diagnostic information.

See Debugging the RACF access control module for more information.