IRRPassTicket.generate
Message
ERROR class com.ibm.etools.zos.server.ZosClient: (R_ticketserv)
SafRc=8, racfRc=8 racfRsn=16
at com.ibm.eserver.zos.racf.IRRPassTicket.generate
ERROR class com.ibm.etools.zos.server.ZosSystemService:
SafRc=8, racfRc=8 racfRsn=16 at
com.ibm.eserver.zos.racf.IRRPassTicket.generate Explanation
When this error occurs during logon, it is due to a security setup error (or missing ACF2 or TSS maintenance). See PassTicket - Access not authorized (8/8/16) when it occurs randomly with RC 8/8/16 and the security product is ACF2 or TSS.
Additional information
See Security Server RACF® Callable Services (SA22-7691), section R_ticketserv (IRRSPK00)
Location:
http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/ICHZD190/2.48.7?SHELF=ICHZBK90&DT=20080520114546
(z/OS® 1.10)
| SAF return code | RACF return code | RACF reason code | Explanation |
|---|---|---|---|
|
0 |
0 |
0 |
The service was successful. |
|
4 |
0 |
0 |
RACF is not installed. |
|
8 |
8 |
0 |
Invalid function code. |
|
8 |
8 |
4 |
Parameter list error. |
|
8 |
8 |
8 |
An internal error was encountered. |
|
8 |
8 |
12 |
A recovery environment could not be established. |
|
8 |
8 |
16 |
Not authorized to use this service. |
|
8 |
8 |
20 |
High order bit was not set to indicate last parameter. |
|
8 |
12 |
8 |
Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with a 'parameter buffer overflow' return code. This indicates an internal error in IRRSPK00. |
|
8 |
12 |
12 |
Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with an 'unable to allocate storage' return code. The region size for the Security Server Network Authentication Service started task (SKRBKDC) should be increased. |
|
8 |
12 |
16 |
Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with a 'local services are not available' return code. This indicates that the Security Server Network Authentication Service started task (SKRBKDC) address space has not been started or is terminating. |
|
8 |
12 |
20 |
Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with an 'abend in the PC service routine' return code. The symptom record associated with this abend can be found in the logrec data set. |
|
8 |
12 |
24 |
Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with an 'unable to obtain control lock' return code. This can occur if the task holding the lock is not being dispatched (for example, a dump is in progress). |
|
8 |
16 |
X'nnnn nnnn' |
The Security Server Network Authentication Service was not able to successfully extract the client principal name from the supplied Kerberos V5 ticket. X'nnnnnnnn' is the Kerberos return code. Refer to the Security Server Network Authentication Service documentation for more information. |
|
8 |
16 |
28 |
Unable to generate PassTicket. |
|
8 |
16 |
32 |
PassTicket evaluation failure. Possible reasons include: PassTicket to be evaluated is not a successful PassTicket. The PassTicket to be evaluated was already evaluated before and replay protection is in effect. No PTKTDATA profile exists to match the specified application. An internal error occurred. |