KLVNA001 SHOWCB FIELDS=(ACBLEN,RPLLEN) ERROR: R15(r15) R0(r0)

Explanation

A VSAM SHOWCB was issued to find the ACB and RPL lengths and failed.

System action

NAM initialization terminates without processing any other control point specifications. Any NAM database is unavailable.

User response

Consult IBM z/OS DFSMS Macro Instructions for Data Sets to determine the reason the SHOWCB macro instruction failed. Return and reason codes are indicated in the r15 and r0 fields.

Message Type

WARNING

KLVNA002 parameters

Explanation

As the parameters in module KLVINNAM are read, a log audit trail is created.

System action

None.

User response

None.

Message Type

LOG

KLVNA003 DATABASE INACCESSIBLE, NO VSAM LSR RESOURCES: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

NAM database dsname on control point cntrlpt cannot be used because no LSR resources were allocated during start-up. The parameters required, as specified in the RKLVIN DD, are LSRKEYLN, LSRPOOL, and LSRSTRNO.

System action

TMS:Engine start-up terminates.

User response

Contact IBM® Software Support.

Message Type

WARNING

KLVNA004 DUPLICATE CONTROL POINT SPECIFICATION: CNTRLPT(cntrlpt)

Explanation

The control point name cntrlpt specified in the initialization library member KLVINNAM is a duplicate.

System action

TMS:Engine initialization terminates.

User response

Correct the error in KLVINNAM and restart TMS:Engine.

Message Type

WARNING

KLVNA005 DATABASE ALLOCATION FAILED: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

TMS:Engine was unable to allocate the data set dsname. The control point cntrlpt associated with the data set is also displayed.

System action

TMS:Engine start-up terminates.

User response

This message is accompanied by message KLVDA002, which gives a more specific reason for the error. Use the information provided to determine the cause of the error and restart TMS:Engine.

Message Type

WARNING

KLVNA006 DATABASE INITIAL LOAD COMPLETE: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

Initialization has completed successfully for the NAM database dsname in control point cntrlpt.

System action

None.

User response

None.

Message Type

INFO

KLVNA007 DATABASE dsname INITIAL LOAD mm/dd/yy hh:mm:ss ON smfid LAST ACCESSED mm/dd/yy hh:mm:ss ON smfid2

Explanation

This message is logged to create an audit trail for each NAM database dsname specified in member KLVINNAM in the initialization library.

System action

None.

User response

None.

Message Type

LOG

KLVNA008 KLVINNAM RKANPAR PARAMETERS:

Explanation

Module KLVINNAM logs its start-up parameters as they are read from RKANPAR. This is the header message and will be followed by message KLVNA002.

System action

None.

User response

None.

Message Type

LOG

KLVNA009 UNABLE TO LOAD USER SECURITY EXIT: EP(member)

Explanation

TMS:Engine was unable to LOAD the security exit member chosen as a security validation option. This message is accompanied by message KLVCM003, which provides a more specific reason for the error.

System action

TMS:Engine start-up terminates.

User response

If message KLVCM003 precedes this message, determine the cause of the error, correct it, and restart TMS:Engine. If KLVCM003 does not precede this message, ensure that the load module exists in the RKANMODL concatenation and restart TMS:Engine.

Message Type

ERRO

KLVNA010 CONTROLPOINT cntrlpt INITIALIZED

Explanation

NAM control point cntrlpt has been initialized.

System action

None.

User response

None.

Message Type

INFO

KLVNA011 DATABASE INITIALIZATION FAILED: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

An error was encountered during NAM initialization of control point cntrlpt.

System action

TMS:Engine initialization terminates.

User response

Make sure that the NAM database is available and is not allocated by another region.

Message Type

WARNING

KLVNA012 GENCB BLK=ACB ERROR: R15(r15) R0(r0)

Explanation

A VSAM GENCB that was issued to create an ACB failed.

System action

TMS:Engine initialization terminates.

User response

Consult the t IBM z/OS DFSMS Macro Instructions for Data Sets to determine the reason the GENCB macro instruction failed. Return and error codes are indicated in the r15 and r0 fields.

Message Type

WARNING

KLVNA013 GENCB BLK=RPL ERROR: R15(r15) R0(r0)

Explanation

A VSAM GENCB issued to create an RPL failed.

System action

TMS:Engine start-up terminates.

User response

Consult the IBM z/OS DFSMS Macro Instructions for Data Sets to determine the reason the GENCB macro instruction failed. Return and reason codes are indicated in the r15 and r0 fields.

Message Type

WARNING

KLVNA014 UNABLE TO OPEN NAM DATABASE: DSNAME(dsname) DDNAME(ddn) R15(r15) ACBERFLG(acberflg)

Explanation

An attempt by TMS:Engine to OPEN the NAM database dsname failed. More information is provided in the message for diagnostic purposes.

System action

TMS:Engine start-up terminates.

User response

Consult the t IBM z/OS DFSMS Macro Instructions for Data Sets to determine the reason the OPEN macro instruction failed. The return code is indicated in the r15 field.

Message Type

WARNING

KLVNA015 DATABASE INACCESSIBLE: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

The NAM database dsname is not accessible.

System action

TMS:Engine start-up terminates.

User response

Check the log for other messages concerning this data set to determine a more specific reason for the error. If none can be found, contact IBM Software Support.

Message Type

WARNING

KLVNA016 DATABASE RELATIVE KEY POSITION NOT 0: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

The NAM database dsname relative key position is not 0. The data set was not defined properly.

System action

TMS:Engine start-up terminates.

User response

Delete the NAM database in error, redefine it, and restart TMS:Engine. You may need to refer to the original installation procedures to determine the correct parameters when defining the NAM database.

Message Type

WARNING

KLVNA017 DATABASE KEY LENGTH NOT n: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

While processing the NAM database dsname for control point cntrlpt, an error was detected in the key length. The length must be equal to n. Either an incorrect version of the NAM database is being used, or the database was not defined properly.

System action

TMS:Engine start-up terminates.

User response

Delete the NAM database in error, redefine it, and restart TMS:Engine. You may need to refer to the original installation procedures to determine the correct parameters when defining the NAM database.

Message Type

WARNING

KLVNA018 DATABASE CONTROL RECORD NOT FOUND: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

While attempting to initialize the NAM environment for control point cntrlpt, an error was detected in the VSAM data set dsname. The control record for the database could not be located. This message is accompanied by KLVVSnnn messages, that give a more specific reason for failure to locate the record.

System action

TMS:Engine start-up terminates.

User response

Look in the log for other messages concerning this data set to determine a more specific reason for the error. If none can be found, contact IBM Software Support.

Message Type

WARNING

KLVNA019 DATABASE INITIAL LOAD FAILED: DSNAME(dsname) CNTRLPT(cntrlpt) R15(r15) RPLERRCD(rplerrcd)

Explanation

An I/O error was detected while processing the NAM cluster.

System action

TMS:Engine start-up fails.

User response

Consult the IBM z/OS DFSMS Macro Instructions for Data Sets to determine the reason the PUT macro instruction failed. Return and error codes are indicated in the r15 and rplerrcd fields. If the error cannot be attributed to a user error, contact IBM Software Support.

Message Type

WARNING

KLVNA020 keyword(value) IS INVALID FOR CNTRLPT(cntrlpt); DEFAULTS TO def

Explanation

keyword in the KLVINNAM member of RKANPAR was specified with a value that is not a valid choice.

System action

The default value, def, will be used. TMS:Engine initialization continues.

User response

Correct the keyword value. If the default value is unacceptable, recycle TMS:Engine.

Message Type

WARNING

KLVNA021 DATABASE CONTROL RECORD UPDATE FAILED: DSNAME(dsn) CNTRLPT(cntrlpt)

Explanation

During NAM initialization, TMS:Engine attempted to update the database (dsn) associated with control point cntrlpt. The update failed.

System action

NAM initialization continues, to identify any other errors. TMS:Engine will terminate after NAM initialization finishes.

User response

Review RKLVLOG for KLVVS0nn messages that will identify the error. Correct the error and restart TMS:Engine.

Message Type

WARNING

KLVNA022 MODCB BLK=ACB ERROR: R15(r15) R0(r0)

Explanation

During NAM initialization, TMS:Engine attempted to update a VSAM ACB. The update failed.

System action

NAM initialization continues, to identify any other errors. TMS:Engine will terminate after NAM initialization finishes.

User response

Consult the t IBM z/OS DFSMS Macro Instructions for Data Sets to determine the reason the MODCB macro instruction failed. Return and reason codes are indicated in the r15 and r0 fields.

Message Type

WARNING

KLVNA023 DATABASE DSNAME RETRIEVAL FAILED, RC(rc) ERROR(error) INFO(info) DDNAME(ddn) CNTRLPT(cntrlpt)

Explanation

During NAM initialization, an attempt to determine the data set name associated with DD ddn. The z/OS® DYNALLOC function failed with the indicated return, error, and info codes.

System action

NAM initialization continues, to identify any other errors. TMS:Engine will terminate after NAM initialization finishes.

User response

Consult the IBM z/OS MVS Programming: Authorized Assembler Services Reference to determine the reason DYNALLOC failed.

Message Type

WARNING

KLVNA024 DATA=xxxxxxxx IS INVALID

Explanation

The value specified for the DATA parameter in the KLVINNAM member is not valid. The valid values are ABOVE and BELOW.

System action

Initialization is terminated.

User response

Edit the KLVINNAM member and correct the parameter specification.

Message Type

WARNING

KLVNA025 CONTROL POINT OPTIONS NOT VALID WITH DATA=

Explanation

Control point options may not be specified when the DATA parameter is specified.

System action

Initialization is terminated.

User response

Edit the KLVINNAM member and correct the parameter specification.

Message Type

WARNING

KLVNA026 DATA= ALREADY DEFINED; IGNORED

Explanation

The DATA parameter is specified more than once in the KLVINNAM member.

System action

The first specification is used and the second specification is ignored. Processing continues.

User response

Edit the KLVINNAM member and correct the parameter specification.

Message Type

WARNING

KLVNA027 VALUE FOR KEYWORD REUSEPW(nnnn) IS INVALID, DEFAULTING TO 8, VALUES FROM 0 TO 8 ARE ACCEPTED.

Explanation

The value of the REUSEPW parameter is not a decimal integer between 0 and 8.

System action

The value of the REUSEPW parameter is assumed to be 8 and processing continues.

User response

Edit the KLVINNAM member and correct the parameter specification.

Message Type

WARNING

KLVNA028 UNABLE TO LOAD USER PARAMETER EXIT: EP(nnnnnnnn)

Explanation

The indicated user parameter exit was specified, but no routine by that name can be found.

System action

Initialization is terminated.

User response

Edit the KLVINNAM member and correct the parameter specification. If the parameter value is correct, check to insure that the load module nnnnnnnn exists in a data set accessible to IBM Tivoli® Monitoring.

Message Type

WARNING

KLVNA029 CONTROL POINT OPTIONS NOT VALID WITH FIELDEXIT=

Explanation

Control point options may not be specified when the FIELDEXIT parameter is specified.

System action

Initialization is terminated.

User response

Edit the KLVINNAM member and correct the parameter specification.

Message Type

WARNING

KLVNA030 DUPLICATE FIELDEXIT PARAMETER ENCOUNTERED

Explanation

More than one FIELDEXIT parameter was found in the KLVINNAM member.

System action

The first FIELDEXIT parameter is used and any others are ignored. Processing continues.

User response

Edit the KLVINNAM member and correct the parameter specification.

Message Type

WARNING

KLVNA031 CLASSES DESCRIPTION NOT FOUND: CNTRLPT(cntrlpt) RKANPAR(RKANPAR)

Explanation

The member specified on the CLASSES= parameter of control point cntrlpt was not found in RKANPAR.

System action

TMS:Engine start-up fails.

User response

Make sure that the correct member name of the protected class list is specified, and try again.

Message Type

ALERT

KLVNA032 DUPLICATE CLASS DEFINITION: CNTRLPT(cntrlpt) RKANPAR(RKANPAR) LINE(line)

Explanation

The resource class name specified has already been defined.

System action

TMS:Engine start-up fails.

User response

Make sure all resource class names are unique and try again.

Message Type

ALERT

KLVNA033 INVALID READAUTH BYTE X'xx’, CNTRLPT(nnnnnnnn) ddname(member)

Explanation

The value specified for READAUTH for control point nnnnnnnn in the specified member is not valid.

System action

Initialization is terminated.

User response

Edit the indicated member and correct the parameter specification.

Message Type

ALERT

KLVNA034 DATABASE ALLOCATION FAILED - RESOURCE ERROR: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

TMS:Engine was unable to allocate the data set dsname, because of a logical resource manager error. The control point cntrlpt associated with the data set is also displayed.

System action

TMS:Engine start-up terminates.

User response

This error is probably due to insufficient free storage. Make sure storage pre-allocated by RKANPAR member KLVINSTG has not depleted all storage specified by the MAXIMUM parameter in RKLVIN.

Message Type

WARNING

KLVNA035 DATABASE ALLOCATION FAILED: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

TMS:Engine was unable to allocate the data set dsname. The control point cntrlpt associated with the data set is also displayed.

System action

TMS:Engine start-up terminates.

User response

Review RKLVLOG for message KLVDA002 followed by IBM IKJ message from SVC99. Correct the problem and retry.

Message Type

WARNING

KLVNA036 CONTROL POINT OPTIONS NOT VALID WITH VALIDATE=

Explanation

The VALIDATE keyword was specified on the same logical statement as the controlpoint definition in member KLVINNAM in the initialization library.

System action

TMS:Engine start-up terminates.

User response

Make sure the VALIDATE keyword has been specified as a separate logical statement from the controlpoint definition and try again.

Message Type

WARNING

KLVNA037 VALIDATE= validagte IS INVALID

Explanation

An invalid value for the VALIDATE keyword was specified in member KLVINNAM in the initialization library.

System action

TMS:Engine start-up terminates.

User response

Make sure the VALIDATE keyword value is either SINGLE or MULTIPLE and try again.

Message Type

WARNING

KLVNA038 VALIDATE= ALREADY DEFINED; IGNORED

Explanation

The VALIDATE keyword was specified more than once in member KLVINNAM in the initialization library.

System action

TMS:Engine start-up continues. The duplicate keyword is ignored.

User response

Remove the duplicate keyword.

Message Type

WARNING

KLVNA039 CONTROL POINT OPTIONS NOT VALID WITH FOLD=

Explanation

Control point options may not be specified when the FOLD parameter is specified.

System action

Initialization is terminated.

User response

Edit the KLVINNAM member and correct the parameter specification.

Message Type

WARNING

KLVNA040 FOLD= ALREADY DEFINED; IGNORED

Explanation

More than one FOLD parameter was found in the KLVINNAM member.

System action

The first FOLD parameter is used and any others are ignored. Processing continues.

User response

Edit the KLVINNAM member and correct the parameter specification.

Message Type

WARNING

KLVNA041 FOLD=xxxx IS INVALID

Explanation

The value specified for the FOLD parameter in the KLVINNAM member is not valid. The valid values are YES and NO.

System action

Initialization is terminated.

User response

Edit the KLVINNAM member and correct the parameter specification.

Message Type

WARNING

KLVNA042 SAF PROFILE ssss.jjjjjjjj.KLVINNAM.FOLD READING safrc racfrc racfrsn

Explanation

Class $KOBSEC is always checked for a profile that matches ssss.jjjjjjjj.KLVINNAM.FOLD; this message displays the SAF return code, RACF return code, and RACF reason code from that SAF call. ssss is the smfid and jjjjjjjj is the started-task name.

System action

TMS:Engine start-up continues.

User response

If the SAF profiles are not in use to specify the FOLD and CNTRLPT parameters, then a non-zero SAF return code is expected and those parameters will be read from RKANPARU(KxxINNAM).

Message Type

INFO

KLVNA043 CONTROL POINT IGNORED CNTRLPT(cntrlpt). SAF PROFILE IS USED.

Explanation

Control point cntrlpt was found in RKANPARU(KxxINNAM) but was ignored because SAF profiles were in use.

System action

TMS:Engine start-up continues.

User response

None required. This message can be avoided by removing or commenting out the CNTRLPT parameters in RKANPARU(KxxINNAM).

Message Type

INFO

KLVNA044 NO APPLDATA RETURNED FOR SAF PROFILE (ssss.jjjjjjjj.KLVINNAM.cntrlpt)

Explanation

This profile was found but the APPLDATA does not contain any CNTRLPT parameters.

System action

Initialization is terminated.

User response

Ensure that the required CNTRLPT parameters are added to this profile.

Message Type

WARNING

KLVNA045 NO CONTROL POINTS FOUND IN SAF PROFILES

Explanation

Profile ssss.jjjjjjjj.KLVINNAM.FOLD was found, but no ssss.jjjjjjjj.KLVINNAM.cntrlpt profiles were found.

System action

Initialization is terminated.

User response

If SAF profile control of CNTRLPT parameters is required, there needs to be at least one ssss.jjjjjjjj.KLVINNAM.cntrlpt profile with valid APPLDATA; if SAF profile control of CNTRLPT parameters is not required, remove profile ssss.jjjjjjjj.KLVINNAM.FOLD.

Message Type

WARNING

KLVNA046 TOO MANY CONTROL POINTS FOUND IN SAF PROFILES

Explanation

More than 99 ssss.jjjjjjjj.KLVINNAM.cntrlpt profiles were found.

System action

Initialization is terminated.

User response

Reduce the number of ssss.jjjjjjjj.KLVINNAM.cntrlpt profiles to be 99 or fewer.

Message Type

WARNING

KLVNA047 safprofilename

Explanation

This shows which profile matched the current resource.

System action

TMS:Engine start-up continues.

User response

None required.

Message Type

INFO

KLVNA101 UNABLE TO ACCESS NAM DATABASE: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

The network access manager (NAM) was called to validate security for a user. DB was specified as an option for the control point cntrlpt, but the database associated with the control point could not be accessed.

System action

Security validation fails and the user is logged off.

User response

Check initialization library member KLVINNAM to verify that the control point and database have been defined correctly.

Message Type

ALERT

KLVNA102 USER NOT DEFINED: CNTRLPT(cntrlpt) USERID(userid) [GROUP(group]) [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called. The supplied user ID is invalid. This message can be generated if the address space is not APF-authorized. Fields of interest are the control point name cntrlpt, the userid userid, the group group, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. The system action depends on the configuration of NAM. If using NAM to do the validation, the userid was not defined in the NAM database. If using a NAM exit, the external security package was unable to locate the userid. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

If you are a user viewing this message on your screen, re-enter a valid user ID. Verify that the address space is APF-authorized.

Message Type

INFO

KLVNA103 PASSWORD NOT AUTHORIZED: CNTRLPT(cntrlpt) USERID(userid) [GROUP(group]) [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called. The password supplied is invalid for the userid. Fields of interest are the control point name cntrlpt, the userid userid, the group group, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. The system action depends on the configuration of NAM. If using NAM to do the validation, the password defined in the NAM database was different than the one entered at the terminal. If using a NAM exit, the external security package detected a different password than the one defined for the user. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

If you are a user viewing this message on your screen, supply a correct password.

Message Type

INFO, VIEW

KLVNA104 CURRENT PASSWORD EXPIRED: CNTRLPT(cntrlpt) USERID(userid) [GROUP(group]) [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called. The current password has expired. Fields of interest are the control point name cntrlpt, the userid userid, the group group, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. The system action depends on the configuration of NAM. If using NAM to do the validation, the password defined in the NAM database has expired. If using a NAM exit, the password defined to the external security package has expired. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

If you are a user viewing this message on your screen, supply a new password.

Message Type

INFO, VIEW

KLVNA105 NEW PASSWORD INVALID: CNTRLPT(cntrlpt) USERID(userid) [GROUP(group]) [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called. The new password was invalid. Fields of interest are the control point name cntrlpt, the userid userid, the group group, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. The system action depends on the configuration of NAM. If using NAM to do the validation, the new password passed to NAM was invalid. If using a NAM exit, the new password passed to the external security package was invalid. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

If you are a user viewing this message on your screen, supply a valid new password.

Message Type

INFO, VIEW

KLVNA106 USER NOT DEFINED TO GROUP: CNTRLPT(cntrlpt) USERID(userid) [GROUP(group]) [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called. The user userid is not defined to the group specified. Fields of interest are the control point name cntrlpt, the userid userid, the group group, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. This message will appear with the use of an external security package. The group supplied for the entered userid was not valid. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

If you are a user viewing this message on your screen, specify a valid group for the userid supplied.

Message Type

INFO, VIEW

KLVNA107 USER ACCESS REVOKED: CNTRLPT(cntrlpt) USERID(userid) [GROUP(group]) [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called. The user (userid) access has been revoked. Fields of interest are the control point name cntrlpt, the userid userid, the group group, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. This message will appear with the use of an external security package. Access will no longer be allowed for this userid due to excessive invalid password attempts, userid expiration, or some other internal processing by the external security package. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

Access has been revoked for this userid. Contact your security administrator for the external security package and have the userid reset.

Message Type

INFO, VIEW

KLVNA108 GROUP ACCESS REVOKED: CNTRLPT(cntrlpt) USERID(userid) [GROUP(group]) [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called. Access to the group supplied has been revoked for this userid. Fields of interest are the control point name cntrlpt, the userid userid, the group group, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. This message will appear with the use of an external security package. Access will no longer be allowed for this userid/group due to excessive invalid password attempts, userid expiration, or some other internal processing by the external security package. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

Access has been revoked for this userid/group combination. Contact your security administrator for the external security package and have the userid reset.

Message Type

INFO, VIEW

KLVNA109 TERMINAL NOT AUTHORIZED: CNTRLPT(cntrlpt) USERID(userid) [GROUP(group]) [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called. The user userid is not authorized to use this terminal. Fields of interest are the control point name cntrlpt, the userid userid, the group group, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. This message will appear with the use of an external security package. Access is not allowed for the userid from the terminal where signon was attempted. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

If you are a user viewing this message on your screen, correct the userid or signon from a different terminal. If the problem persists, contact the security administrator for the external security package.

Message Type

INFO, VIEW

KLVNA110 APPLICATION NOT AUTHORIZED: CNTRLPT(cntrlpt) USERID(userid) [GROUP(group]) [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called to validate security. The user userid is not authorized to use the specified application. Fields of interest are the control point name cntrlpt, the userid userid, the group group, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. This message will appear with the use of an external security package. Access is not allowed for the userid to the application where the signon was attempted. The userid is restricted to a set of applications and the application where the signon was attempted was not one of those. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

If you are a user viewing this message on your screen, correct the userid or signon to a different application. If the problem persists, contact the security administrator for the external security package.

Message Type

INFO, VIEW

KLVNA111 OPERATOR NOT AUTHORIZED: CNTRLPT(cntrlpt) [OPERATOR(operator)] [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the Network Access Manager (NAM) was called. The operator operator is not authorized to use the TMS:Engine operator facility. Fields of interest are the control point name cntrlpt, the operator id operator, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

This message is installation specific. This message will appear with the use of an external security package. Access is not allowed for the userid to the TMS:Engine operator facility by the external security package. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

If you are a user viewing this message on your screen, correct the operator ID. If the problem persists, contact your security administrator for the security package.

Message Type

INFO, VIEW

KLVNA112 COMMAND NOT AUTHORIZED: CNTRLPT(cntrlpt) [OPERATOR(operator)] [COMMAND(command)] [TERM(terminal)] [APPL(appl)]

Explanation

Security validation for the specified user failed when the network access manager (NAM) was called. The operator operator is not authorized to issue the specified command. Fields of interest are the control point name cntrlpt, the operator ID operator, the command command, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

The command terminates. This message is installation specific. This message will appear with the use of an external security package. The operator command entered was not allowed by the external security package. This message will appear in RKLVLOG and may be seen at the terminal if the external security package has not passed a message back to NAM. If a message was passed back by the external security package, that message will be seen.

User response

If you are a user viewing this message on your screen, correct the command or validate the command. If the problem persists, contact your security administrator for the external security package.

Message Type

INFO, VIEW

KLVNA113 PARAMETER REJECTED BY USER EXIT: CNTRLPT(cntrlpt) [OPERATOR(operator)] [COMMAND(command)] [TERM(terminal)] [APPL(appl

Explanation

A NAM FIELDEXIT has determined that a NAM request field is not valid. The exit should have provided additional messages about the error. Fields of interest are the control point name cntrlpt, the operator ID operator, the command command, the terminal name terminal, and the application name appl. The control point name cntrlpt may be in the form cntrlpt1-cntrlpt2, where cntrlpt1 refers to the control point used and cntrlpt2 to the control point requested. The message is logged to create an audit trail, but this can be overridden at start-up time.

System action

The function is not completed. This message is installation specific, and may be generated for any NAM function. This message will appear in RKLVLOG.

User response

Contact your system programmer to determine why the installation exit has rejected the value.

Message Type

INFO, VIEW

KLVNA114 PASSTICKET REQUEST NOT AUTHORIZED: CNTRLPT(cntrlpt) [OPERATOR(operator)] [COMMAND(command)] [TERM(terminal)] [APPL(appl

Explanation

A NAM PASSTICKET request has been denied by the NAM user exit and the exit has not supplied an override message.

System action

No PassTicket is generated.

User response

Contact your security administrator to ensure that you are authorized to generate a PassTicket for the destination application and userid.

Message Type

INFO, VIEW

KLVNA151 UNABLE TO ACCESS NAM DATABASE: DSNAME(dsname) CNTRLPT(cntrlpt)

Explanation

Security validation for the specified user failed when NAM was called. The database specified as an option for the control point cntrlpt could not be accessed.

System action

Security validation fails and the user is logged off.

User response

Check the definitions of the control point and the database in the initialization library member KLVINNAM.

Message Type

ALERT

KLVNA251 UNABLE TO {DELETE | DEFINE} SAF RESOURCE LIST: CLASS(class) R15(r15)

Explanation

The RACROUTE macro was issued to build or delete an in-storage profile for class class and failed. r15 is the code returned by RACROUTE.

System action

For DELETE, the in-storage profile remains in virtual storage. For DEFINE, the profile is unavailable.

User response

Refer to RACROUTE Macro Reference for MVS and VM (GC28-1366) for the meaning of r15.

Message Type

INFO

KLVNA252 UNABLE TO {DELETE | DEFINE} RACF® RESOURCE LIST: CLASS(class) R15(r15)

Explanation

The RACLIST macro was issued to build or delete an in-storage profile for class class and failed. r15 is the code returned by RACLIST.

System action

For DELETE, the in-storage profile remains in virtual storage. For DEFINE, the profile is unavailable.

User response

Refer to the RACROUTE Macro Reference for MVS and VM for the meaning of r15.

Message Type

INFO

KLVNA253 RESOURCE LIST BUILD DISABLED, NOT APF AUTHORIZED

Explanation

An attempt was made (either at initialization or through the NAM RACLIST command) to build an in-storage profile (for use by your security system). The attempt failed because the address space is not APF-authorized.

System action

TMS:Engine will use RACHECK macros instead of FRACHECK to verify security access.

User response

If you desire in-storage profiles, APF authorize the address space. If your security system does not provide in-storage profiles, or you have specified your own security exits in KLVINNAM, you may ignore this message.

Message Type

INFO

KLVNA254 UNABLE TO CREATE DUMMY ACEE: RC(rc)

Explanation

The NAM RACLIST command was issued to refresh in-storage profiles, but failed because a dummy ACEE could not be created.

System action

The command is ignored.

User response

Use the return code to determine the reason for the RACROUTE (or possibly RACINIT failure). Refer to the IBM z/OS MVS Programming: Authorized Assembler Services Reference for the meaning of rc.

Message Type

INFO

KLVNA255 UNABLE TO DELETE DUMMY ACEE: RC(rc)

Explanation

The NAM RACLIST command was issued to refresh in-storage profiles. The refresh was successful, but the dummy ACEE could not be deleted.

System action

The ACEE remains active.

User response

Use the return code to determine the reason for the RACROUTE (or possibly RACINIT failure). Refer to IBM's RACROUTE Macro Reference (RACROUTE) or IBM z/OS MVS Programming: Authorized Assembler Services Reference for the meaning of rc.

Message Type

INFO

KLVNA256 REFRESH OF RESOURCE PROFILES COMPLETE

Explanation

The NAM RACLIST command was issued to refresh in-storage profiles. The refresh was successful.

System action

None.

User response

None.

Message Type

INFO

KLVNT001 "NTD dialog" DIALOG MANAGER INIT FAILED

Explanation

While performing an NTD operator command, TMS:Engine could not initialize the dialog manager for the dialog, dialog.

System action

The NTD command terminates.

User response

Save the z/OS SYSLOG, and the TMS:Engine RKLVLOG and run sheets. Then contact IBM Software Support.

Message Type

ERROR

KLVNT002 "NTD dialog" DIALOG INVOCATION FAILED; DIALOG MANAGER RC(rc)

Explanation

The non-terminal dialog, dialog, failed with a return code of rc.

System action

The NTD command terminates.

User response

Refer to message KLVDM011 for a list of return codes, their meanings, and responses.

Message Type

ERROR