Start of change

DSNL060I csect-name AUTHENTICATION PROCESSING FAILED FOR TOKEN RECEIVED FROM REQUESTER LOCATION=location FOR THREAD WITH LUWID=luwid REASON=reason-code CORR-TOKEN=corr-token IFCID=ifcid SEE TRACE RECORD WITH IFCID SEQUENCE NUMBER=seq-no

Explanation

FL 505 RACF® could not successfully process the authentication token that the requester sent as authentication credentials. RACF detected an error in the content of the authentication token. The failure, along with the authentication token and other pertinent information that Db2 passed to RACF, was written into an ICFID 415 exception trace record.

csect-name
The name of the control section that issued the message. The control section name might be followed by an internal ID.
location
The IP address of the requester, which is included in the exception trace record.
luw-id
The logical unit of work ID of the requester if available or the description of the logical unit of the requester in the format of netid.luname.hhhhhhhhhhhh, where hhhhhhhhhhhh is the hexadecimal character representation of the instance number of the connection session.
reason-code
The Db2 reason code for the authentication token processing error. This value is also included in the IFCID exception trace record.
corr-token
The correlation token that is used to correlate the work at the Db2 requester and server. The correlation token contains the following three components, separated by periods:
  • The IP address of the requester that is 3-39 characters in length
  • The port address of the requester that is 1-8 characters in length
  • A 12-character unique identifier.
ifcid
The IFCID number of the trace record, which is IFCID 415.
seq-no
The IFCID sequence number associated with the trace record, which is printed in hexadecimal. The trace data is not externalized if the sequence number is zero.

System action

The connection request is terminated.

Problem determination

RACF issues message ICH408I. The message may include the user ID associated with the authentication token if RACF can determine one. If the message indicates that an ICFID415 exception trace record is written, determine the destination of the trace record and print the trace record with SEQUENCE NUMBER=seq-no. See z/OS Security Server RACF Command Language Reference and z/OS Security Server RACROUTE Macro Reference for more information about RACF identity tokens and RACF authentication token processing errors.

End of change