RACF informational messages

You can use informational messages to see how RACF is set up for a particular subsystem.

After you successfully activate the RACF access control module and Db2 invokes RACF for authorization checking, you can use the information found in messages IRR908I through IRR911I and IRR916I to see how RACF is set up for a particular subsystem.

These messages identify:

• The Db2 subsystem name, or in a Db2 data sharing environment, the Db2 group attachment name
• The FMID of the RACF access control module () or APAR number associated with the module
• The length of the RACF access control module
• The options used for the module
  For example, &ERROROPT specifies the correct action to be taken for Db2 initialization and authorization errors.

  Note: The MVS programmer sets these options. For detailed information, see Choosing the RACF access control module customization options.
• The classes that the module is trying to use
• The classes for which a RACROUTE request was successful
• Whether the module fully supports Db2 roles

These messages are routed only to the system log and occur only at Db2 initialization time, not during authorization checking. Therefore, these messages are issued regardless of whether any authorization checks have been made, and are issued even when Db2 initialization fails.