DFS2166 EXTENDED SECURITY VIOLATION FOR MSC LINK [I: sss/name, D: sss/name,U:name]

Explanation

While an MSC link was receiving an input message destined to a transaction, a security check to determine if the input message was allowed for the transaction destination failed. The failure occurred due to an authorization check made by RACF® or by the user exit DFSCTRN0.

If the optional part of the message is printed:
  • name following D: is the transaction destination of the message. name following I: is the input system LTERM name.
  • sss following I: is the SYSID of the input system. sss following D: is the SYSID of the processing system.
  • name following U: is the USERID that failed the authorization check. The CTL region ID will not be displayed if it is used for the authorization check.
The /DISPLAY ASSIGNMENT SYSID command can be used to determine the MSNAME involved.

System action

IMS logs the message in error, using record type 64, and removes the message from the system.

System programmer response

Correct the erroneous security error. Check the MSCSEC= parameter in the DFSDCxxx PROCLIB member of the remote system. Also, check that the link receive logic of the user exit DFSMSCE0 of the remote system determines the type of security check that was made. Using the information from the X'64F1' and X'64F2' log records and the DFS2166 error message determine why the security authorization check failed.

An X'6701' log record with ID=CMEA is logged. CLBTEMP5 contains the return code (RC) from DFSCAUT0, and CLBTEMP3 contains the RC from the request that failed or zeros. These return codes are shown in the following table:
Table 1. CLBTEMP3 return codes
RC Label Description
4 CAUTRMSC RACF failure occurred; it was unable to obtain the ACEE for MSNAME.
CLBTEMP3 = RACF RC
8 RACFERR RACROUTE failure.
CLBTEMP3 = RACF RC.
C CAUT044 TRANAUTH was specified, but RACF was not defined.
10 TESTE010 An error was returned from DFSCRTN0.
CLBTEMP3 = DFSCTRN0 RC.
14 GETRACWE The GETRACW routine was unable to obtain storage.
CLBTEMP3 = BCB RC.
18 CAUTRINT The CAUTRINT routine was unable to obtain storage.
CLBTEMP3 = BCB RC.

Problem determination

14

Module

DFSCMS00