Log Forwarder cannot generate RACF PassTicket with return code and reason codes SafRc=8, racfRc=8 racfRsn=16

Edit online

Log Forwarder cannot generate RACF® PassTicket.

Symptom

A Log Forwarder message states that the RACF PassTicket cannot be generated for a user. The return code and reason codes are SafRc=8, racfRc=8 racfRsn=16.

Cause

The user ID has insufficient authority to use the RACF PassTicket service.

Solution

Grant the RACF permissions to the user ID to generate PassTickets.
  1. In RACF, define a profile in the PTKTDATA class that controls access to the PassTicket services and explicitly set the universal access authority to NONE: 
    RDEFINE PTKTDATA IRRPTAUTH.GPMSERVE.* UACC(NONE)
  2. The user ID must have update permission to the new profile:
    PERMIT IRRPTAUTH.GPMSERVE.* CLASS(PTKTDATA) ID(user) ACCESS(UPDATE)
    where user is the user ID to authenticate with RMF DDS..
  3. Run the following command to make your changes effective:
    SETROPTS RACLIST(PTKTDATA) REFRESH