|
Each RACF® callable service
records additional variable data specific to the problem: - R_usermap (CSECT IRRRIM00)
- Error determining the RACF user
ID associated with an application user identity
- Service name: RACXTRT or ICHEINTY
- Variable data: The string 'IRRRIM00_XXXX:', where XXXX is
the procedure name from which error occurs
- Additional variable data: application user identity and field
names, such as SNAME or UNAME
- Error determining the application user identity associated with
a RACF user ID
- Service name: RACXTRT
- Variable data: The string 'IRRRIM00_XXXX:', where
XXXX is the procedure name from which error occurs
- Additional variable data: RACF user
ID and field names, such as SNAME or UNAME
- Figure 1 shows an example of a symptom
record when the user name is not found in an alias index entry but
is found in the mapping profile.
Figure 1. An example of a symptom record when an SNAME is not found in
the alias index entry but is found in the mapping profile (part 1
of 2)TYPE: SYMPTOM RECORD REPORT: SOFTWARE EDIT REPORT DAY YEAR
REPORT DATE: 032 00
SCP: VS 2 REL 3 ERROR DATE: 032 00
MODEL: 4381 HH MM SS.TH
SERIAL: 127685 TIME: 08:28:48.85
SEARCH ARGUMENT ABSTRACT:
PIDS/5752XXH00 PRCS/0000000C PRCS/00000000 RIDS/IRRRIM00
RIDS/IRRRFR10#L
SYSTEM ENVIRONMENT:
CPU MODEL: 4381 DATE: 032 00
CPU SERIAL: 127685 TIME: 08:28:48.85
SYSTEM: RACFR10 BCP: MVS
RELEASE LEVEL OF SERVICE ROUTINE: HBB7703
SYSTEM DATA AT ARCHITECTURE LEVEL: 10
COMPONENT DATA AT ARCHITECTURE LEVEL: 10
SYSTEM DATA: 00000000 00000000 |........|
COMPONENT INFORMATION:
COMPONENT ID: 5752XXH00
COMPONENT RELEASE LEVEL: 7703
SERVICE RELEASE LEVEL: HRF7703
DESCRIPTION OF FUNCTION: RACF z/OS UNIX SYSTEM CALLABLE SERV.
PROBLEM ID: ICHEINTY
PRIMARY SYMPTOM STRING:
PIDS/5752XXH00 PRCS/0000000C PRCS/00000000 RIDS/IRRRIM00
RIDS/IRRRFR10#L
SYMPTOM SYMPTOM DATA EXPLANATION
--------------- ------------- -----------
PIDS/5752XXH00 5752XXH00 COMPONENT IDENTIFIER
PRCS/0000000C 0000000C RETURN CODE
PRCS/00000000 00000000 RETURN CODE
RIDS/IRRRIM00 IRRRIM00 ROUTINE IDENTIFIER
RIDS/IRRRFR10#L IRRRFR10#L ROUTINE IDENTIFIER
SECONDARY SYMPTOM STRING:
ADRS/0000140C
SYMPTOM SYMPTOM DATA EXPLANATION
--------------- ------------- -----------
ADRS/0000140C 0000140C STORAGE ADDRESS
FREE FORMAT COMPONENT INFORMATION:
KEY = F000 LENGTH = 000100 (0064)
+000 C9D9D9D9 C9D4F0F0 6DC19389 81A26DD3 |IRRRIM00_ALIAS_L|
+010 96837A40 E2D5C1D4 C540D4E8 40D3D596 |OC: SNAME MY LNO|
+020 A385A240 C9958696 40404040 40404040 |TES INFO |
+030 LENGTH(0048) ==> ALL BYTES CONTAIN X'40'.
+060 40404040 | |
HEX DUMP OF RECORD:
HEADER
+000 4C831800 00000000 0000032F 08284885 |<C.............E|
+010 FF127685 43810000 | ...E.A.. |
Figure 2. An example of a symptom record when
an SNAME is not found in the alias index entry but is found in the
mapping profile (part 2 of 2)SYMPTOM RECORD
+000 E2D9F4F3 F8F1F1F2 F7F6F8F5 FFFFBCF1 |SR4381127685...1|
+010 B388C6D9 4BC38185 40404040 40404040 |.HFR.CAE |
+020 4040D9C1 C3C6D9F1 F040F5F7 F5F2C8C2 |RACFR10 5752HB |
+030 C2F7F7F0 F3400080 00000000 00000000 |B7703 ..........|
+040 F1F00030 00640070 00490138 000E0181 |10.............A|
+050 0068018F 00000000 00000000 00000000 |................|
+060 00000000 00000000 00000000 00000000 |................|
+070 E2D9F2F1 F1F0F5F7 F5F2E7E7 C8F0F000 |SR21105752XXH00.|
+080 F7F7F0F3 C8D9C6F7 F7F0F340 00000000 |7703HRF7703 ....|
+090 00000000 00000000 00000000 D9C1C3C6 |............RACF|
+0A0 40D69785 95C58489 A3899695 40C38193 |z/OS UNIX SYSTEM|
+0B0 93818293 8540E285 99A54B40 00000000 |CALLABLE SERV. .|
+0C0 00000000 C9C3C8C5 C9D5E3E8 00000000 |....ICHEINTY....|
+0D0 00000000 066839B1 066839B1 066839BF |................|
+0E0 066839BF 06683A27 06683A27 01000000 |................|
+0F0 06683830 00000000 00000000 F0F1F2F3 |............0123|
+100 F4F5F6F7 F8F9C1C2 C3C4C5C6 0049000E |456789ABCDEF....|
+110 0068000F 00000000 F0F0F0F0 F1F4F0C3 |........0000140C|
+120 00000000 00000000 00000000 00000000 |................|
+130 00000000 00000000 D7C9C4E2 61F5F7F5 |........PIDS/575|
+140 F2E7E7C8 F0F040D7 D9C3E261 F0F0F0F0 |2XXH00 PRCS/0000|
+150 F0F0F0C3 40D7D9C3 E261F0F0 F0F0F0F0 |000C PRCS/000000|
+160 F0F040D9 C9C4E261 C9D9D9D9 C9D4F0F0 |00 RIDS/IRRRIM00|
+170 40D9C9C4 E261C9D9 D9D9C6D9 F1F07BD3 | RIDS/IRRRFR10#L|
+180 40C1C4D9 E261F0F0 F0F0F1F4 F0C340F0 | ADRS/0000140C 0|
+190 000064C9 D9D9D9C9 D4F0F06D C1938981 |...IRRRIM00_ALIA|
+1A0 A26DD396 837A40E2 D5C1D4C5 40D4E840 |S_LOC: SNAME MY |
+1B0 D3D596A3 85A240C9 95869640 40404040 |LNOTES INFO |
+1C0 LENGTH(0048) ==>ALL BYTES CONTAIN X'40'.
- getGMAP (CSECT IRRRGM01)
- Error extracting the group name corresponding to the input group
ID
- Service name: RACXTRT or ICHEINTY
- Variable data: The string 'IRRRGM01_XXXX: YYYY',
where XXXX is the procedure name from which error
occurs and YYYY is the GROUP mapping profile name
for RACXTRT service or is the GROUP Alias name for ICHEINTY service
- Error extracting the group ID corresponding to the input group
name
- Service name: RACXTRT
- Variable data: The string 'IRRRGM01_XXXX: YYYY',
where XXXX is the procedure name from which error
occurs and YYYY is the GROUP profile name
- getGMAP/getUMAP/initUSP (CSECT IRRRUM02)
- Error locating or updating a profile during automatic UID/GID
assignment
- Service name: ICHEINTY
- Variable data: The string ’IRRRUM02_XXXX: YYYY’,
where XXXX is the procedure name from which error
occurs and YYYY is the ICHEINTY operation
- Additional Variable data: class name and profile name
- Primary symptom string return code: ICHEINTY return code
- Secondary symptom string reason code: ICHEINTY reason code
- Error processing APPLDATA for the BPX.NEXT.USER profile in the
FACILITY class
- Service name: BPXNEXT
- Variable data: The string ’IRRRUM02_XXXX: YYYY’,
where XXXX is the procedure name from which error
occurs and YYYY is the profile being processed for
automatic UID/GID assignment
- Additional variable data: One of the following error descriptions:
- Profile BPX.NEXT.USER ran out of UID values
- Profile BPX.NEXT.USER ran out of GID values
- getUMAP (CSECT IRRRUM01)
- Error extracting the user name corresponding to the input user
ID
- Service name: RACXTRT or ICHEINTY
- Variable data: The string 'IRRRUM01_XXXX: YYYY',
where XXXX is the procedure name from which error
occurs and YYYY is the USER mapping profile name
for RACXTRT service or is the USER application identity name for
ICHEINTY service
- Error extracting the user ID corresponding to the input user name
- Service name: RACXTRT
- Variable data: The string 'IRRRUM01_XXXX: YYYY',
where XXXX is the procedure name from which the
error occurs and YYYY is the USER profile name
- Figure 3 shows an example of a symptom
record when the user name is not found in an alias index entry but
is found in the mapping profile.
Figure 3. An example of a symptom record when a UID is not found in the
alias index entry but is found in the mapping profile (part 1 of
2)TYPE: SYMPTOM RECORD REPORT: SOFTWARE EDIT REPORT DAY YEAR
REPORT DATE: 032 00
SCP: VS 2 REL 3 ERROR DATE: 032 00
MODEL: 4381 HH MM SS.TH
SERIAL: 127685 TIME: 09:16:23.25
SEARCH ARGUMENT ABSTRACT:
PIDS/5752XXH00 PRCS/0000000C PRCS/00000000 RIDS/IRRRUM01
RIDS/IRRRFR10#L
SYSTEM ENVIRONMENT:
CPU MODEL: 4381 DATE: 032 00
CPU SERIAL: 127685 TIME: 09:16:23.25
SYSTEM: RACFR10 BCP: MVS
RELEASE LEVEL OF SERVICE ROUTINE: HBB7703
SYSTEM DATA AT ARCHITECTURE LEVEL: 10
COMPONENT DATA AT ARCHITECTURE LEVEL: 10
SYSTEM DATA: 00000000 00000000 |........|
COMPONENT INFORMATION:
COMPONENT ID: 5752XXH00
COMPONENT RELEASE LEVEL: 7703
SERVICE RELEASE LEVEL: HRF7703
DESCRIPTION OF FUNCTION: RACF z/OS UNIX SYSTEM CALLABLE SERV.
PROBLEM ID: ICHEINTY
PRIMARY SYMPTOM STRING:
PIDS/5752XXH00 PRCS/0000000C PRCS/00000000 RIDS/IRRRUM01
RIDS/IRRRFR10#L
SYMPTOM SYMPTOM DATA EXPLANATION
-------------- --------------- -------------
PIDS/5752XXH00 5752XXH00 COMPONENT IDENTIFIER
PRCS/0000000C 0000000C RETURN CODE
PRCS/00000000 00000000 RETURN CODE
RIDS/IRRRUM01 IRRRUM01 ROUTINE IDENTIFIER
RIDS/IRRRFR10#L IRRRFR10#L ROUTINE IDENTIFIER
SECONDARY SYMPTOM STRING:
ADRS/00000BAA
SYMPTOM SYMPTOM DATA EXPLANATION
--------------- ------------- -----------
ADRS/00000BAA 00000BAA STORAGE ADDRESS
FREE FORMAT COMPONENT INFORMATION:
KEY = F000 LENGTH = 000100 (0064)
+000 C9D9D9D9 E4D4F0F1 6DC1D3C9 C1E26DE4 |IRRRUM01_ALIAS_U|
+010 D3D6C37A 40F1F2F3 F4F5F6F7 F8404040 |LOC: 12345678 |
+020 LENGTH(0064) ==> ALL BYTES CONTAIN X'40'.
+060 40404040 | |
HEX DUMP OF RECORD:
HEADER
+000 4C831800 00000000 0000032F 09162325 |<C..............|
+010 FF127685 43810000 |...E.A.. |
Figure 4. An example of a symptom record when
a UID is not found in the alias index entry but is found in the mapping
profile (part 2 of 2)SYMPTOM RECORD
+000 E2D9F4F3 F8F1F1F2 F7F6F8F5 FFFFBCF1 |SR4381127685...1|
+010 B388D17B 767DA544 40404040 40404040 |.HJ#.'V. |
+020 4040D9C1 C3C6D9F1 F040F5F7 F5F2C8C2 |RACFR10 5752HB |
+030 C2F7F7F0 F3400080 00000000 00000000 |B7703 ..........|
+040 F1F00030 00640070 00490138 000E0181 |10.............A|
+050 0068018F 00000000 00000000 00000000 |................|
+060 00000000 00000000 00000000 00000000 |................|
+070 E2D9F2F1 F1F0F5F7 F5F2E7E7 C8F0F000 |SR21105752XXH00.|
+080 F7F7F0F3 C8D9C6F7 F7F0F340 00000000 |7703HRF7703 ....|
+090 00000000 00000000 00000000 D9C1C3C6 |............RACF|
+0A0 40D69785 95C58489 A3899695 40C38193 |z/OS UNIX SYSTEM|
+0B0 93818293 8540E285 99A54B40 00000000 |CALLABLE SERV. .|
+0C0 00000000 C9C3C8C5 C9D5E3E8 00000000 |....ICHEINTY....|
+0D0 00000000 06694591 06694591 0669459F |.......J...J....|
+0E0 0669459F 06694607 06694607 01000000 |................|
+0F0 06694410 00000000 00000000 F0F1F2F3 |............0123|
+100 F4F5F6F7 F8F9C1C2 C3C4C5C6 0049000E |456789ABCDEF....|
+110 0068000F 00000000 F0F0F0F0 F0C2C1C1 |........00000BAA|
+120 00000000 00000000 00000000 00000000 |................|
+130 00000000 00000000 D7C9C4E2 61F5F7F5 |........PIDS/575|
+140 F2E7E7C8 F0F040D7 D9C3E261 F0F0F0F0 |2XXH00 PRCS/0000|
+150 F0F0F0C3 40D7D9C3 E261F0F0 F0F0F0F0 |000C PRCS/000000|
+160 F0F040D9 C9C4E261 C9D9D9D9 E4D4F0F1 |00 RIDS/IRRRUM01|
+170 40D9C9C4 E261C9D9 D9D9C6D9 F1F07BD3 | RIDS/IRRRFR10#L|
+180 40C1C4D9 E261F0F0 F0F0F0C2 C1C140F0 | ADRS/00000BAA 0|
+190 000064C9 D9D9D9E4 D4F0F16D C1D3C9C1 |...IRRRUM01_ALIA|
+1A0 E26DE4D3 D6C37A40 F1F2F3F4 F5F6F7F8 |S_ULOC: 12345678|
+1B0 LENGTH(0064) ===> ALL BYTES CONTAIN X'40'.
- InitACEE (CSECT IRRRIA00)
- Certificate decoding problem
- Service name: DECX509B
- Variable data: The following 6 fullwords:
- Address of the certificate passed to InitACEE
- Length of the certificate passed to InitACEE
- Address of the byte found to be in error
- Internal diagnostic word
- Number of certificate bytes recorded in the next 4 variable data
sections
- Number of certificate bytes skipped at the beginning of the certificate
when recording
- Additional variable data: up to 1024 bytes of the certificate
- Error in certificate profile (user ID not valid)
- Service name: GETUSERI
- Variable data: The string 'Bad DIGTCERT Class Profile'
- Additional variable data: The name of the DIGTCERT class profile
found to be in error
- Error in certificate profile (user ID not defined to RACF)
- Service name: RACINIT
- Variable data: The string 'Bad DIGTCERT Class Profile'
- Additional variable data: The name of the DIGTCERT class profile
found to be in error
- Unexpected return code from R_cacheserv SAF callable service
- Service name: CACHSERV
- Variable Data: The 8 byte user ID input to R_cacheserv
- Primary symptom string return code: R_cacheserv return code
- Primary symptom string return code: R_cacheserv reason code
- Unexpected return code from RACROUTE REQUEST=VERIFY
- Service name: RACINIT
- Variable data: The nine character user ID being verified (1 byte
length followed by up to 8 characters for the user ID itself)
- Problem with IDID user mapping
- Service name: IRRDID2U
- Variable data: Includes return code and IDID
- InitACEE (CSECT IRRRIA02)
- Certificate decoding problem
- Service name: DECX509B
- Variable data: The following 6 fullwords:
- Address of the certificate passed to InitACEE
- Length of the certificate passed to InitACEE
- Address of the byte found to be in error
- Internal diagnostic word
- Amount of certificate data recorded
- Amount of certificate data truncated
- Additional variable data: up to 1024 bytes of the certificate
- Error retrieving the CERTAUTH certificate repeat group from the
irrcerta profile.
- Service name: RACXTRT
- Variable data: The string 'Couldn't extract the CERTAUTH anchor
USER profile, irrcerta'.
- Additional variable data: none
- Error extracting the private key size (CERTPRVS) from a DIGTCERT
profile.
- Service name: RACXTRT
- Variable data: The string 'Bad CERTAUTH class profile:'label-value
- Additional variable data: The profile name
- InitACEE (CSECT IRRRIA05)
- Error extracting the trust status (UACC) from a DIGTCERT profile
- Service name: RACEXTR
- Variable data: The string 'Bad DIGTCERT Class Profile'
- Additional variable data: The profile name
- Error extracting date fields CERTSTRT, CERTEND from a DIGTCERT
profile
- Service name: RACEXTR
- Variable data: The string 'Bad DIGTCERT Class Profile'
- Additional variable data: The profile name
- Error extracting the CERTAUTH anchor in the USER profile.
- Service name: RACEXTR
- Variable data: The string 'Bad USER class profile — irrcerta'
- R_cacheserv (CSECT IRRRCH12)
- Physical error accessing the CACHECLS profile on the RACF database
- Service name: ICHEINTY
- Variable data: The string "LOCATE CACHECLS profile xxxx" where
xxxx is the 16 byte profile name.
- Logical error with the contents of the CACHECLS profile read from
the RACF database
- Service name: Database (not a real Service, rather an indicator
something was wrong with the profile read from the RACF database)
- Variable data: The string "CACHECLS profile xxxx not valid:" where
xxxx is the 16 byte profile name. Following that string is one of
the following reasons the profile was determined not to be valid.
- missing profile
- profile not valid
- timestamp is not correct
- data space offset is not correct
- data space size is not correct
- data space count is not correct
- cache version is not correct
- R_cacheserv (CSECT IRRRCH13)
- Physical error accessing the CACHECLS profile on the RACF database
- Service name: ICHEINTY
- Variable data: The string "{LOCATE | ALTER | ADD} CACHECLS profile
xxxx" where xxxx is the 16 byte profile name.
- R_cacheserv (CSECT IRRRCH14)
- Physical error accessing the CACHECLS profile on the RACF database
- Service name: ICHEINTY
- Variable data: The string "{NEXT | DELETE} CACHECLS profile xxxx"
where xxxx is the 16 byte profile name.
- R_cacheserv (all CSECTs IRRRCHQx in IRRRCH16)
- Error occurred in data space layer
- Service name: DISPLAYER
- Variable data: xxxxxxxx yyyyyyyy zzzzzzzz aaaaaaaa bbbbbbbb: cccccccc
- xxxxxxxx = Internal subroutine identifier
The following are
possible values for xxxxxxxx. These identify the failing data space
layer subroutine: Table 1. Failing data space layer
for an internal subroutine identifierxxxxxxxx |
Data space layer call |
---|
8 |
dspCreate |
24 |
dspDelete |
28 |
dspConnect |
32 |
dspExtend |
36 |
dspExpose |
40 |
dspHide |
44 |
addAlet |
48 |
delAlet |
52 |
dspAdd |
60 |
dspDisconnect |
64 |
dasENQDS |
68 |
dasDEQDs |
76 |
dasSetVer |
80 |
dasGetVer |
84 |
dasCopyDS |
- yyyyyyyy = Failing system service
The following are possible
values for yyyyyyyy. These identify the failing system service or
internal request: Table 2. Failing system service
for a failing system service identifieryyyyyyyy |
Failing system service |
---|
0 |
None |
4 |
TCBTOKEN |
8 |
DSPSERV CREATE |
12 |
ALESERV ADD |
16 |
DSPSERV DELETE |
20 |
Data space does not exist |
24 |
Data space header eye-catcher bad |
28 |
Irrrch10 not found |
32 |
IEANTCR |
36 |
IEANTRT |
40 |
IEANTDL |
44 |
DSPSERV EXTEND |
48 |
ALESERV DELETE |
Uppercase values are z/OS system
macros. Lowercase values are internal requests. |
- zzzzzzzz = failing system service return code
- aaaaaaaa = failing system service reason code
- bbbbbbbb = identifies R_cacheserv subroutine
- cccccccc = additional diagnostic text, such as "dspCreate failed"
- R_cacheserv (CSECTs IRRRCHQx in IRRRCH16)
- Error occurred in data space layer
- Service name: DSPLAYER
- Variable data: bbbbbbbb: cccccccc
- bbbbbbbb = identifies R_cacheserv subroutine
- cccccccc = additional diagnostic text
- R_cacheserv (CSECTs IRRRCHQC in IRRRCH16)
- Recovery attempted after a failure during cache creation
- Service name: REEXPOSE
- Variable data: bbbbbbbb: RE–EXPOSE cccccccc dddddddd
- bbbbbbbb = identifies R_cacheserv subroutine
- cccccccc = identifies failing object
- dddddddd = successful or failed
- R_cacheserv (CSECT IRRRCHQD, IRRRCHQG, IRRRCHQE in IRRRCH16)
- Name/token service failure
- Service name: IEANTRT
- Variable data: bbbbbbbb: IEANTRT error
- bbbbbbbb = identifies R_cacheserv subroutine
- R_cacheserv (CSECT IRRRCHQG in IRRRCH16)
- Name/token service failure
- Service name: IEANTCR
- Variable data: bbbbbbbb: IEANTCR Error
- bbbbbbbb = identifies R_cacheserv subroutine
- R_cacheserv (CSECT IRRRCHQJ in IRRRCH16)
- Error restoring cache
- Service name: RESTORE
- Variable data: Restore: IRRRCH12 Restore DS error
- R_cacheserv (CSECT IRRRCH18)
- Unable to use ICSF for random number generation, therefore, a
software pseudo random number generator (SW PRNG) is used. It is
possible that CSNBRNG is not found in LPA. See 'FINDMOD:' logrec
for more information.
- Service name: RANDNUM
- Variable Data: IRRRCH18: USING SW PRNG, NOT CSNBRNG
- Primary symptom string return code: 4
- Primary symptom string reason code: 0
- Unable to find module in LPA using CSVQUERY
- Service name: name of the module that was not found
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd FINDMOD:
UNABLE TO FIND MODULE IN LPA.
- aaaaaaaa is an indicator of R_cacheserv operation.
The
following are possible values for aaaaaaaa: Table 3. Indicator of R_cacheserv operationaaaaaaaa |
Operation |
---|
201 |
IRRRCH10 SRB failed |
202 |
Find IRRRCH10 SRB in LPA |
203 |
Find other module in LPA (CSNBRNG) |
210 |
Get cell from cell pool in data space |
211 |
Add cell pool extent to cell pool in data space |
213 |
Copy data to data cell(s) in cell pool |
214 |
Locate data in data space |
215 |
Delete data in data space |
216 |
R18ADD |
217 |
R18IDX |
218 |
R18GET |
219 |
GenerateReference |
220 |
CallDes |
- bbbbbbbb is the system service or internal check being
performed.
The following are possible values for bbbbbbbb: Table 4. System service or internal check being performedbbbbbbbb |
Service |
---|
8 |
DSPSERV create – Create data space |
10 |
CSRPGT1 – Get cell pool cell |
11 |
CSRPEXP – Add cell pool extent |
12 |
ALESERV Add |
13 |
CHKEXT – Check if data space is full (does EXTent
area hit data area) |
14 |
Search – Find node in cache |
15 |
PLO instruction #1 |
16 |
DSPSERV delete – delete data space |
17 |
PLO instruction #2 |
18 |
CSRPFR1 – Free cell pool cell (dddddddd = address
of cell being freed) |
19 |
Not used |
20 |
Expiration time check for data or reference |
21 |
CSNBRNG – ICSF random number function |
22 |
Not used |
23 |
CSVQUERY – Find mod in LPA |
24 |
RACROUTE TYPE=ENCRYPT |
- cccccccc is return code from service bbbbbbbb.
- dddddddd is reason code from service bbbbbbbb.
- Primary symptom string return code: 4
- Primary symptom string reason code: 0
- CSNBRNG failure, using software pseudo random number generator
(PRNG)
- Service name: RANDNUM
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd GENREF:
USE SOFTWARE PRNG, NOT CSNBRNG
- Primary symptom string return code: 0
- Primary symptom string reason code: 0
- RACROUTE TYPE=ENCRYPT failure
- Service name: CALLDES
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd RACROUTE
REQ=EXTRACT,TYPE=ENCRYPT FAIL
- Primary symptom string return code: RACROUTE return code
- Primary symptom string reason code: 0
- R_cacheserv (CSECT IRRRCH20)
- Name/token service failure
- Service name: [IEANTRT0 | IEANTRT1 | IEANTCR]
- Variable data: SETUPCACHE: [IEANTRT|IEANTCR] FAILURE
- Primary symptom string return code: return code from IEANTRT/IEANTCR
- Primary symptom string reason code: 0 (name/token functions have
no reason codes)
- Failure due to no RCVI
- Service name: FINDRCVI
- Variable data: RCVTRCVI=0. UNABLE TO BUILD ICTX
- Primary symptom string return code: 0
- Primary symptom string reason code: 0
- Error occurred during STORE operation
- Service name: STORE
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORE:
R18ADD ([1|2]) ERROR
- Primary symptom string return code: [0,4,8…]
- Primary symptom string reason code: 0
- Error occurred while an R_cacheserv operation was trying to find
or create the cache
- Service name: IRRRCH18
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd SETUPCACHE:
ERROR IN IRRRCH18
- Primary symptom string return code: [0,4,8…]
- Primary symptom string reason code: 0
- Error occurred during DESTROY operation
- Service name: DESTROY
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd DESTROY:
R18TERM ERROR
- Primary symptom string return code: [0,4,8…]
- Primary symptom string reason code: 0
- Error occurred during RETRIEVE operation
- Service name: RETRIEVE
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd RETRIEVE:
R18GET ERROR
- Primary symptom string return code: [0,4,8…]
- Primary symptom string reason code: 0
- Error occurred during REMOVE operation
- Service name: REMOVE
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORE:
R18DEL ERROR
- Primary symptom string return code: [0,4,8…]
- Primary symptom string reason code: 0
- Error occurred during REMOVE EXPIRED operation
- Service name: CLEANUP
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORE:
R18CLN ERROR
- Primary symptom string return code: [0,4,8…]
- Primary symptom string reason code: 0
- Error occurred during LOCATE operation
- Service name: LOCATE
- Variable Data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORE:
R18IDX ERROR
- Primary symptom string return code: [0,4,8…]
- Primary symptom string reason code: 0
- R_cacheserv (CSECT IRRRCH22)
- Error occurred obtaining storage for a DSG block
- Service name: OBTAIN1
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORAGE
OBTAIN FOR DSG FAILURE
- aaaaaaaa = STORAGE OBTAIN length
- bbbbbbbb = STORAGE OBTAIN subpool
- cccccccc = unused
- dddddddd = unused
- Primary symptom string return code: storage obtain return code.
See z/OS MVS Programming: Assembler Services Reference IAR-XCT for
the description of the return codes for the STORAGE OBTAIN macro.
- Primary symptom string reason code: 0
- No active TTAB was found
- Service name: TTAB1
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd NO
ACTIVE TTAB FOUND
- aaaaaaaa = address of the DSCA
- bbbbbbbb = TTAB anchor
- cccccccc = active TTAB pointer
- dddddddd = unused
- Primary symptom string return code: 0
- Primary symptom string reason code: 0
- Inconsistency found in TTAB slot
- Service name: MEMTOKCK
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd TTAB
SLOT INCONSISTENCY system-name
- aaaaaaaa = TTAB anchor
- bbbbbbbb = active TTAB pointer
- cccccccc = index into the active TTAB
- dddddddd = system token for system name
- system-name = system name of sysplex member
- Primary symptom string return code: 0
- Primary symptom string reason code: 0
- DSG is returned with either no DSGR or more than one DSGR
- Service name: DSG2
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd DSG
INCONSISTENCY FROM SYSTEM system-name
- aaaaaaaa = DSG address
- bbbbbbbb = DSG return code
- cccccccc = DSGR pointer
- dddddddd = number of responses
- system-name = system name of sysplex member
- Primary symptom string return code: 0
- Primary symptom string reason code: 0
- Error occurred when attempting intersystem communication
- Service name: DSG1
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd UNEXPECTED
DSG RC FROM SYSTEM system-name
- aaaaaaaa = DSG address
- bbbbbbbb = DSG return code
- cccccccc = number of DSGs sent
- dddddddd = DSGR pointer
- system-name = system name of sysplex member
- Primary symptom string return code: 0
- Primary symptom string reason code: 0
- Other system had either: more information to return and had a
STORAGE OBTAIN error, or an unexpected error
- Service name: IRRRCH24
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd IRRRCH24
HAD PROBLEM ON SYSTEM system-name
- aaaaaaaa = DSG address
- bbbbbbbb = DSGR pointer
- cccccccc = DSGR return buffer pointer
- dddddddd = DSGR return buffer length
- system-name = system name of sysplex member
- Primary symptom string return code: IRRRCH24 return code
- 2 - BAD_OBTAIN, STORAGE OBTAIN failure
- Primary symptom string reason code: IRRRCH24 reason code
- The DSGR lacks a return buffer
- Service name: DSGR1
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd DSGR
LACKS RETURN BUFFER FROM system-name
- aaaaaaaa = DSG address
- bbbbbbbb = DSGR pointer
- cccccccc = DSGR return buffer pointer
- dddddddd = DSGR return buffer length
- system-name = system name of sysplex member
- Primary symptom string return code: 0
- Primary symptom string reason code: 0
- STORAGE OBTAIN failure on R_cacheserv return buffer for record
name
- Service name: OBTAIN2
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORAGE
OBTAIN FOR RECORD NAME FAILURE
- aaaaaaaa = STORAGE OBTAIN length
- bbbbbbbb = STORAGE OBTAIN subpool
- cccccccc = unused
- dddddddd = unused
- Primary symptom string return code: storage obtain return code.
See z/OS MVS Programming: Assembler Services Reference IAR-XCT for
the description of the return codes for the STORAGE OBTAIN macro.
- Primary symptom string reason code: 0
- STORAGE OBTAIN failure on R_cacheserv return buffer for date
- Service name: OBTAIN3
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORAGE
OBTAIN FOR DATA FAILURE
- aaaaaaaa = STORAGE OBTAIN length
- bbbbbbbb = STORAGE OBTAIN subpool
- cccccccc = unused
- dddddddd = unused
- Primary symptom string return code: storage obtain return code.
See z/OS MVS Programming: Assembler Services Reference IAR-XCT for
the description of the return codes for the STORAGE OBTAIN macro.
- Primary symptom string reason code: 0
- STORAGE OBTAIN failure on R_cacheserv return buffer for source
- Service name: OBTAIN4
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd STORAGE
OBTAIN FOR SOURCE FAILURE
- aaaaaaaa = STORAGE OBTAIN length
- bbbbbbbb = STORAGE OBTAIN subpool
- cccccccc = unused
- dddddddd = unused
- Primary symptom string return code: storage obtain return code.
See z/OS MVS Programming: Assembler Services Reference IAR-XCT for
the description of the return codes for the STORAGE OBTAIN macro.
- Primary symptom string reason code: 0
- Error from a R_cacheserv operation on another system
- Service name: IRRRCH24
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd **xx password
ERROR ON SYSTEM system-name
- aaaaaaaa = R_cacheserv option
- bbbbbbbb = unused
- cccccccc = unused
- dddddddd = unused
- **xx = 1st 4 characters of input user ID
- password = input password
- system-name = system name of sysplex member
- Primary symptom string return code: system-name R_cacheserv RACF return code
- Primary symptom string reason code: system-name R_cacheserv RACF reason code
- IRRRCH22 had an unknown return code
- Service name: WAYOUT
- Variable data: aaaaaaaa bbbbbbbb cccccccc dddddddd **xx password
INTERNAL ERROR
- aaaaaaaa = R_cacheserv option
- bbbbbbbb = unused
- cccccccc = unused
- dddddddd = unused
- **xx = 1st 4 characters of input user ID
- password = input password
- Primary symptom string return code: unexpected IRRRCH22 return
code
- Primary symptom string reason code: unexpected IRRRCH22 reason
code
- R_cacheserv (CSECT IRRRCH28)
- Name/token service failure
- Service name: IEANTCR
- Variable data: Identifies R_cacheserv subroutine
- ENVR object creation failure
- Service name: IRRACM16
- Variable data: Identifies subroutine and ACEE
- Unexpected return code from IRRRCH18 caching function
- Service name: type of request (locate, store, and so on)
- Variable data: Identifies related error information
- R_cacheserv (CSECT IRRRCH30)
- Storage Obtain failure
- Service name: OBTAINx
- Variable data: Identifies subpool and length
- Unexpected return code from RACF sysplex
communication path
- Service name: Identifies the failure point
- Variable data: Identifies related error information
- Unexpected return code from off-system cache
- Service name: IRRRCH32
- Variable data: system name and ICR information
- R_Datalib (CSECT IRRRDL04)
- Error determining the owning user ID for a DIGTCERT profile
- Service name: RACXTRT
- Variable data: The string 'Method GETUSERID failed to extract
the UserID'
- Additional variable data: The profile name
- Error incrementing the last serial number (CERTLSER) of a DIGTCERT
profile
- Service name: RACXTRT or ICHEINTY
- Variable data: The string 'Module IRRCDC29 failed to generate
new Serial Number'
- Additional variable data: The profile name
- R_Datalib (CSECT IRRRDL06)
- Error parsing the input certificate
- Service name: IRRCDC03
- Variable data: The string ‘IRRCDC03 failed to parse the certificate’
- Error retrieving the certificate profile
- Service name: RACMAP
- Variable data: The string ‘RACMAP failed to retrieve the certificate
profile’
- Additional variable data: The certificate profile name
- Error retrieving the CERTNAME repeat group from a user profile
- Service name: RACEXTR
- Variable data: The string ‘RACEXTR failed to retrieve the CERTNAME
repeat group’
- Additional variable data: The user name
- Error locating the certificate in the CERTNAME repeat group
- Service name: RACEXTR
- Variable data: The String ‘Certificate not found in USER profile’
- Additional variable data: The user name
- Error retrieving the private key from the certificate profile
- Service name: RACEXTR
- Variable data: The string ‘RACFEXTR failed to retrieve the
private key’
- Additional variable data: The certificate profile name
- Error adding the certificate to RACF
- Service name: IRRCDC02
- Variable data: The string 'IRRCDC02 Error - Certificate already
exists'
- Additional variable data: The certificate profile name
- Error adding the certificate to RACF
- Service name: IRRCDC02
- Variable data: The string ‘IRRCDC02 failed to add the certificate’
- Additional variable data: The certificate profile name
- Error altering the certificate in RACF
- Service name: IRRCDC05
- Variable data: The string ‘IRRCDC05 failed to alter the certificate’
- Additional variable data: The certificate profile name
- Error connecting the certificate to a RACF ring
- Service name: IRRCDC19
- Variable data: The string ‘IRRCDC19 failed to connect the certificate’
- Additional variable data: The certificate profile name
- Error calling ICSF service CSNDKRR to retrieve the PKDS entry
- Service name: CSNDKRR
- Variable data: The string ‘CSNDKRR failed to retrieve the PKDS
entry’
- Additional variable data: The PKDS entry name
- R_DCEAUTH (CSECT IRRRDA00)
- Create ACEE failure
- Service name: RACINIT
- Variable data: the RACF user
ID
- Convert UUID to RACF user
ID failure
- Service name: RACXTRT
- Variable data: the DCEUUIDS profile name
- Check authorization failure
- Service name: RACHECK or FASTAUTH
- Variable data: the RACF user
ID, class, profile, and access requested
- Delete ACEE failure
- Service name: RACINIT
- Variable data: the ACEE address
- R_DCEINFO (CSECT IRRRDI00)
- Extract DCE fields failure
- Service name: RACXTRT
- Variable data: the RACF user
ID and the names of the fields
- Replace DCE fields failure
- Service name: RACXTRT
- Variable data: the RACF user
ID and the names of the fields
- R_DCERUID (CSECT IRRRUD00)
- Extract DCEUUIDS APPLDATA failure
- Service name: RACXTRT
- Variable data: the DCEUUIDS profile name
- R_DCEKEY (CSECT IRRRDK00)
- Extract DCE key failure
- Service name: RACXTRT
- Variable data: the RACF user
ID
- Replace DCE key failure
- Service name: RACXTRT
- Variable data: the RACF user
ID
- R_DCEKEY (CSECT IRRCPT01)
- Extract KEYSMSTR key failure
- Service name: ICHEINTY
- Variable data: the class and profile name
- ICSF CSNBENC callable service failure
- Service name: CSNBENC
- Variable data: the RACF user
ID
- ICSF CSNBDEC callable service failure
- Service name: CSNBDEC
- Variable data: the RACF user
ID
- R_PKIserv (CSECT IRRRPX00)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIserv attempting to check
a caller's authority to the service'
- Additional variable data: The FACILITY class profile name, the
ACEE address, and the user ID from the ACEE
- R_PKIserv (CSECT IRRRPX02)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIserv GENCERT attempting
to check a caller's authority to the service'
- Additional variable data: The FACILITY class profile name, the
ACEE address, and the user ID from the ACEE
- Unexpected return code from RACDCERT internal subroutine IRRCDC23
- Service name: IRRCDC23
- Variable data: The string 'Error in R_PKIserv GENCERT attempting
to call RACDCERT subroutine. Unexpected return code'
- Additional variable data: The first 942 bytes of the RACDCERT
internal work area
- Error calling RACROUTE REQUEST=EXTRACT to retrieve the PGMRNAME
field from the USER profile
- Service name: RACXTRT
- Variable data: The string 'Error in R_PKIserv GENCERT attempting
to extract PGMRNAME field to build Common Name'
- Additional variable data: The user ID
- R_PKIserv (CSECT IRRRPX04)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIserv EXPORT attempting
to check the caller's authority to the service'
- Additional variable data: The FACILITY class profile name, the
ACEE address, and the user ID from the ACEE
- Unexpected return code from RACDCERT internal subroutine IRRCDC25
- Service name: IRRCDC25
- Variable data: The string 'Error in R_PKIserv EXPORT attempting
to call RACDCERT subroutine. Unexpected return code'
- Additional variable data: The first 942 bytes of the RACDCERT
internal work area
- R_PKIserv (CSECT IRRRPX06)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIserv GENCERT attempting
to check the caller's authority to the service'
- Additional variable data: The FACILITY class profile name, the
ACEE address, and the user ID from the ACEE
- Unexpected return code from RACDCERT internal subroutine IRRCDC27
- Service name: IRRCDC27
- Variable data: The string 'Error in R_PKIserv GENCERT attempting
to call RACDCERT subroutine. Unexpected return code'
- Additional variable data: The first 942 bytes of the RACDCERT
internal work area
- Error calling RACROUTE REQUEST=EXTRACT to retrieve the PGMRNAME
field from the USER profile
- Service name: RACXTRT
- Variable data: The string 'Error in R_PKIserv GENCERT attempting
to extract PGMRNAME field to build Common Name'
- Additional variable data: The user ID
- Error calling MVS™ Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token service failed'
- Additional variable data: The first 942 bytes of the RACDCERT
internal work area
- Error on PC to PKI Services
- Service name: PKIGENC
- Variable data: The string 'PKI Services Failed for function GENCERT'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC
- R_PKIserv (CSECT IRRRPX07)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIserv EXPORT attempting
to check the caller's authority to the service'
- Additional variable data: The FACILITY class profile name, the
ACEE address, and the user ID from the ACEE
- Error calling IRRCDC67 to find parent CERTAUTH chain to input
certificate and build PKCS7 package.
- Service name: IRRCDC67
- Variable data: The string 'Error in R_PKIServ EXPORT attempting
to call RACDCERT subroutine. Unexpected return code.'
- Additional variable data: RACDCERT failing module and service
in form of diagnostic data from the RACDCERT internal work area:
- 4 bytes - internal service code
- 4 bytes - service return code
- 4 bytes - service reason code
- 8 bytes - RACF class name
- 8 bytes - RACF segment
name
- 81 bytes - blank
- 8 bytes - csect name
- 71 bytes - diagnostic message text
- 4 bytes - RACF entity length
- 4 bytes - number of extracted fields
- 56 bytes - array of 8 byte field names (max 7 entries)
- 256 bytes - RACF entity
name
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token service failed'
- Additional variable data: None
- Error on PC to PKI Services
- Service name: PKIEXPT
- Variable data: The string 'PKI Services Failed for function EXPORT'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC
- R_PKIserv (CSECT IRRRPX08)
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token service failed'
- Additional variable data: None
- Error on PC to PKI Services
- Service name: PKIQRYR or PKIQRYC
- Variable data: The string 'PKI Services Failed for function {QUERYREQS
| QUERYCERTS}'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC
- R_PKIserv (CSECT IRRRPX10)
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token service failed'
- Additional variable data: None
- Error on PC to PKI Services
- Service name: PKICRTR or PKICRTD
- Variable data: The string 'PKI Services Failed for function {REQDETAILS
| CERTDETAILS}'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC
- R_PKIserv (CSECT IRRRPX12)
- Error on PC to PKI Services
- Service name: PKIMODR or PKIMODC
- Variable data: The string 'PKI Services Failed for function {MODIFYREQS
| MODIFYCERTS}'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token service failed'
- Additional variable data: None
- R_PKIserv (CSECT IRRRPX13)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIServ VERIFY attempting
to check the caller's authority to the service'
- Additional variable data: The FACILITY class profile name, the
ACEE address, and the user ID from the ACEE
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token service failed'
- Additional variable data: None
- Error on PC to PKI Services
- Service name: PKIVERF
- Variable data: The string 'PKI Services Failed for function VERIFY'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC
- R_PKIserv (CSECT IRRRPX14)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIServ REVOKE attempting
to check the caller's authority to the service'
- Additional variable data: The FACILITY class profile name, the
ACEE address, and the user ID from the ACEE
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token service failed'
- Additional variable data: None
- Error on PC to PKI Services
- Service name: PKIREVOKE
- Variable data: The string 'PKI Services Failed for function REVOKE'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC
- R_PKIserv (CSECT IRRRPX15)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIServ RENEW attempting
to check the caller's authority to the service'
- Additional variable data: The FACILITY class profile name, the
ACEE address, and the user ID from the ACEE
- Error on PC to PKI Services
- Service name: PKIRENW
- Variable data: The string 'PKI Services Failed for function RENEW'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token service failed'
- Additional variable data: None
- R_PKIserv (CSECT IRRRPX18)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIServ RESPOND attempting
to check the caller's authority to the service'
- The FACILITY class profile name, the ACEE address, the user ID
from the ACEE
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token Service, IEANTRT, failed'
- Additional variable data: None
- Error on PC to PKI Services
- Service name: R_PKIServ RESPOND
- Variable data: The string 'PKI Services failed for function RESPOND'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC.
- R_PKIserv (CSECT IRRRPX20)
- Error calling RACROUTE REQUEST=AUTH to determine the caller's
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string 'Error in R_PKIServ SCEPREQ attempting
to check the caller's authority to the service'
- Additional variable data: The FACILITY class profile name, the
ACEE address, the user ID from the ACEE
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token Service, IEANTRT, failed'
- Additional variable data: None
- Error on PC to PKI Services
- Service name: R_PKIServ PKISCEP
- Variable data: The string 'PKI Services failed for function SCEPREQ'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC.
- R_PKIserv (CSECT IRRRPX22)
- Error calling MVS Name/Token
Service
- Service name: IEANTRT
- Variable data: The string 'Name/Token Service, IEANTRT, failed'
- Additional variable data: None
- Error on PC to PKI Services
- Service name: R_PKIServ PKIPREG
- Variable data: The string 'PKI Services failed for function PREREGISTER'
- Additional variable data: Additional information word returned
from PKI Services (register 1) followed by the parameter list used
on the PC.
- R_PKIserv (CSECT IRRRPX24)
- Error calling RACROUTE REQUEST=AUTH to determine the caller’s
access to a FACILITY class profile
- Service name: RACHECK
- Variable data: The string ’Error in R_PKIserv QRECOVER attempting
to check the caller’s authority to the service’
- Additional variable data: The FACILITY class profile name, the
ACEE address, and the user ID from the ACEE
- Error calling MVS Name/Token
Service
- Service name: IEANTRT Error recording
- Variable data: The string ’Name/Token service failed’
- Additional variable data: None
- Error on PC to PKI Services
- Service name: PKIQREC
- Variable data: The string ’PKI Services Failed for function QRECOVER’
- Additional variable data: Additional information word returned
from PKI Services (register 1), followed by the parameter list used
on the PC
- R_PgmSignVer (CSECT IRRSPS00)
- Error with range
- Service name: IRRRPS00
- Variable data: Too many ranges
- Primary symptom string return code: Index of invalid range
- Secondary symptom string reason code: 0
- Error with end address
- Extract error
- Service name: SIGINIT
- Variable data: Extract error:
0xaaaaaaaa
0xbbbbbbbb
0xcccccccc
- Aaaaaaaa=SAFRC
- Bbbbbbb=RACFRC
- Cccccccc=RACFRSN
Primary symptom string return code: RACROUTE return code
Secondary
symptom string reason code: RACROUTE reason code
- Error with APPLDATA algorithm
- Service name: SIGINIT
- Variable data: APPLDATA invalid algorithm: alg
- Alg=What was specified in appldata
- Primary symptom string return code: 0
- Secondary symptom string reason code: 0
- Error locating APPLDATA in profile
- Service name: SIGINIT
- Variable data: APPLDATA not found in profile
- Primary symptom string return code: 0
- Secondary symptom string reason code: 0
- APPLDATA error with leading/trailing blanks
- Service name: SIGINIT
- Variable data: APPLDATA: Leading/Trailing blank encountered
- Primary symptom string return code: Variable ‘I’ – Index of first
blank in appldata
- Secondary symptom string reason code: 0
- Error with APPLDATA algorithm name
- Service name: SIGINIT
- Variable data: APPLDATA: algorithm name too long
- Primary symptom string return code: Variable ‘I’ – Index of first
blank in appldata
- Secondary symptom string reason code: 0
- RING error, ID too long
- Service name: SIGINIT
- Variable data: RING: / not found or ID too long
- Primary symptom string return code: Variable ‘I’, index of ‘/’
- Secondary symptom string reason code: Variable ‘j’ Index of ‘
‘
- RING error, name too long
- Service name: SIGINIT
- Variable data: RING: Name too long or not specified
- Primary symptom string return code: Variable ‘I’, index of ‘/’
- Secondary symptom string reason code: Variable ‘j’ Index of ‘
‘
- Key error in default certificate
- Service name: SIGINIT
- Variable data: No Private Key in default certificate
- Primary symptom string return code: Number of certificates in
ring
- Secondary symptom string reason code: Index of default certificate
in ring
- Error with key analysis
- Service name: SIGINIT
- Variable data: Key analysis error
- Primary symptom string return code: RC from analysisKey() routine
- Secondary symptom string reason code: 0
- Error with number of certificates in ring
- Service name: SIGINIT
- Variable data: Too many certificates in ring
- Primary symptom string return code: Number of certificates in
ring
- Secondary symptom string reason code: 0
- Error with ring default certificate
- Service name: SIGINIT
- Variable data: No default certificate found in ring
- Primary symptom string return code: 0
- Secondary symptom string reason code: 0
- Error with certificate ordering
- Service name: SIGINIT
- Variable data: Certificate ordering error
- Primary symptom string return code: RC from OrderPKCS7CA
- Secondary symptom string reason code: 0
- Error with trust chain length
- Service name: SIGINIT
- Variable data: Trust chain too long
- Primary symptom string return code: Number of items in trust chain
- Secondary symptom string reason code: 0
- Error with R_datalib
- Digest failure error
- Service name: IRRRPS21
- Variable data: Digest failure
- Primary symptom string return code: 0
- Secondary symptom string reason code: 0
- Digest failure 2 error
- Service name: IRRRPS21
- Variable data: Digest failure 2
- Primary symptom string return code: 0
- Secondary symptom string reason code: 0
- Number of ranges error
- Service name: IRRRPS21
- Variable data: Too many ranges
- Primary symptom string return code: # specified ranges
- Secondary symptom string reason code: 0
- Error with end address
- Context error
- Service name: IRRRPS21
- Variable data: New context
- Primary symptom string return code: CLiC rc
- Secondary symptom string reason code: 0
- New digest error
- Service name: IRRRPS21
- Variable data: New digest
- Primary symptom string return code: CLiC rc
- Secondary symptom string reason code: 0
- Digest update error
- Service name: IRRRPS21
- Variable data: Digest update
- Primary symptom string return code: CLiC rc
- Secondary symptom string reason code: 0
- Digest update 2 error
- Service name: IRRRPS21
- Variable data: Digest update 2
- Primary symptom string return code: CLiC rc
- Secondary symptom string reason code: 0
- New context error
- Service name: IRRRPS31
- Variable data: New context
- Primary symptom string return code: CLiC rc
- Secondary symptom string reason code: 0
- Pk service error
- Service name: IRRRPS31
- Variable data: Pk service
- Primary symptom string return code: CLiC rc
- Secondary symptom string reason code: 0
- Rsa sign error
- Service name: IRRRPS31
- Variable data: Rsa sign
- Primary symptom string return code: CLiC rc
- Secondary symptom string reason code: 0
- Rsa verify error
- Service name: IRRRPS31
- Variable data: Rsa verify
- Primary symptom string return code: CLiC rc
- Secondary symptom string reason code: 0
- Decode failure 1 error
- Service name: IRRRPS51
- Variable data: Decode Failure 1
- Primary symptom string return code: RC from decodeSimple()
- Secondary symptom string reason code: 0
- Decode failure 2 error
- Decode failure 3 error
- Service name: IRRRPS51
- Variable data: Decode Failure 3 (hex data)
- Primary symptom string return code: 0
- Secondary symptom string reason code: 0
- Decode failure 4 error
- Service name: IRRRPS51
- Variable data: Decode failure 4
- Primary symptom string return code: RC from DecodeSimple
- Secondary symptom string reason code: 0
- Decode failure 5 error
- Service name: IRRRPS51
- Variable data: Decode failure 5
- Primary symptom string return code: RC from analysiskey()
- Secondary symptom string reason code: 0
- Decode failure 6 error
- Service name: IRRRPS51
- Variable data: Decode failure 6
- Primary symptom string return code: Value of variable seqCount
should be 5
- Secondary symptom string reason code: 0
- Error with signature algorithm
- Service name: VERFINAL
- Variable data: Unsupported signature algorithm
- Primary symptom string return code: Value of CxSignAlg
- Secondary symptom string reason code: 0
- APPLDATA format error
- Service name: VERFINAL
- Variable data: Appldata format error:
#### aaaaa
- Primary symptom string return code: Variable BlankPos: Index of
‘ ‘ in Appldata
- Secondary symptom string reason code: Variable DelimPos: index
of ‘/’ in ApplData
- Extract error
- Decode X509 error
- Service name: VERFINAL
- Variable data: Decode X509 error
- Primary symptom string return code: RC from Decode X509
- Secondary symptom string reason code: Certificate number (I loop
index)
- SetCertificate error
- Service name: VERFINAL
- Variable data: SetCertificate Error
- Primary symptom string return code: RC from SetCertificate
- Secondary symptom string reason code: Certificate number
- R_datalib error
- R_proxyserv (CSECT IRRRPY00)
- Name/token service failure
- Service name: IEANTRT
- Variable data: The string "Name/token service failure"
- Additional variable data: The name for the requested token
- R_proxyserv (CSECT IRRRPY01 and IRRRPY02)
- Error response from LDAP
- Service name: LDAP
- Variable data: Up to 100 bytes of the LDAP error message
- LDAP message response decoding failure
- Service name: LDAPMSG
- Variable data: One of the following strings –
- "Error in LDAP message – Incorrect ASN.1 syntax"
- "Error in LDAP message – Expected field not found"
- "Error in LDAP message – Unsupported character set detected"
- Additional variable data: Up to 1024 bytes of the returned LDAP
message
- R_proxyserv (CSECT IRRCPT01)
- Extract KEYSMSTR key failure
- Service name: ICHEINTY
- Variable data: the class and profile name
- ICSF CSNBENC callable service failure
- Service name: CSNBENC
- Variable data: the RACF user
ID
- ICSF CSNBDEC callable service failure
- Service name: CSNBDEC
- Variable data: the RACF user
ID
- R_admin (CSECT IRRREQ00)
- The R_admin callable service uses the RACF subsystem address space. RACF command images generated by the callable
service or by the caller are passed to the RACF subsystem for execution by invoking the
internal macro IRRREQ. The IRRREQ macro uses the IEFSSREQ macro to
communicate with the RACF subsystem.
In
this environment the following errors could occur: - IRRREQ is unable to communicate with the RACF subsystem (for example, the RACF subsystem is not started).
- IRRREQ is able to communicate with the RACF subsystem, but the RACF command fails in the RACF subsystem (for example, an ADDUSER command
specifying a class that is not valid).
- The R_admin callable service differentiates between these two
errors. For the first error, the callable service returns a SAF return
code of 8, a RACF return code
of 12, and a RACF reason code
set equal to the return code from IEFSSREQ. For the second error,
the callable service returns a SAF return code of 8, a RACF return code of 16, and a RACF reason code set equal to the return code
returned from the command's execution in the RACF subsystem. Additionally, the R_admin callable
service writes symptom records to SYS1.LOGREC for the errors. The
symptom records contain the following information:
- Primary symptom string:
- Component identifier (PIDS) - 5752XXH00
- 1st return code (PRCS) - RACF return
code from the callable service
- 2nd return code (PRCS) - RACF reason
code from the callable service
- Csect routine identifier (RIDS) - IRRREQ00
- Loadmod routine identifier (RIDS) - IRRRFR10#L
- Secondary symptom string:
- Storage address (ADRS) - Error offset into IRRREQ00
- Free format component information: Specific to the error
For the first error (unable to communicate with the RACF subsystem), RACF records the following additional information
in the free format area: Table 5. Additional
informationOffset |
Length |
Description |
---|
0 |
1 |
R_admin callable service function requested |
1 |
4 |
Address of the command image to be executed |
5 |
2 |
Length of the command image to be executed |
Figure 5 shows
an example of a symptom record created when the R_admin callable service
is unable to communicate with the RACF subsystem.
Figure 5. An example of a symptom record
when the callable service cannot communicate with RACFTYPE: SYMPTOM RECORD REPORT: SOFTWARE EDIT REPORT DAY YEAR
REPORT DATE: 348 96
SCP: VS 2 REL 3 ERROR DATE: 348 96
MODEL: 4381 HH MM SS.TH
SERIAL: 111606 TIME: 15:24:51.20
SEARCH ARGUMENT ABSTRACT:
PIDS/5752XXH00 PRCS/0000000C PRCS/00000004 RIDS/IRRREQ00
RIDS/IRRRFR10#L
SYSTEM ENVIRONMENT:
CPU MODEL: 4381 DATE: 348 96
CPU SERIAL: 111606 TIME: 15:24:51.20
SYSTEM: NODE1 BCP: MVS
RELEASE LEVEL OF SERVICE ROUTINE: JBB6604
SYSTEM DATA AT ARCHITECTURE LEVEL: 10
COMPONENT DATA AT ARCHITECTURE LEVEL: 10
SYSTEM DATA: 00000000 00000000 |........|
COMPONENT INFORMATION:
COMPONENT ID: 5752XXH00
COMPONENT RELEASE LEVEL: 240
SERVICE RELEASE LEVEL: HRF2240
DESCRIPTION OF FUNCTION: RACF z/OS UNIX SYSTEM CALLABLE SERV.
PROBLEM ID: IRRREQ
PRIMARY SYMPTOM STRING:
PIDS/5752XXH00 PRCS/0000000C PRCS/00000004 RIDS/IRRREQ00
RIDS/IRRRFR10#L
SYMPTOM SYMPTOM DATA EXPLANATION
--------------- ------------- -----------
PIDS/5752XXH00 5752XXH00 COMPONENT IDENTIFIER
PRCS/0000000C 0000000C RETURN CODE
PRCS/00000004 00000004 RETURN CODE
RIDS/IRRREQ00 IRRREQ00 ROUTINE IDENTIFIER
RIDS/IRRRFR10#L IRRRFR10#L ROUTINE IDENTIFIER
SECONDARY SYMPTOM STRING:
ADRS/00000734
SYMPTOM SYMPTOM DATA EXPLANATION
--------------- ------------- -----------
ADRS/00000734 00000734 STORAGE ADDRESS
FREE FORMAT COMPONENT INFORMATION:
KEY = F000 LENGTH = 000100 (0064)
+000 0204803C A2000D40 40404040 40404040 |....S.. |
+010 LENGTH(0080) ==> ALL BYTES CONTAIN X'40'.
+060 40404040 | |
The IRRREQ (IEFSSREQ) return code is 4. Looking at the free
format component information, the first byte has a value of X'02',
indicating this was an ADMN_DEL_USER request. The next 4 bytes contain
the address of the generated command image (X'04803CA2').
The sixth and seventh bytes contain the two byte length of the generated
command image (X'000D').
For the second error (execution
of the RACF command failed),
the main intent of the symptom record is to capture the command image
that was executed, because it might not be available elsewhere. Therefore,
to limit the amount of user error information written to SYS1.LOGREC, RACF does not write symptom records
for ADMN_RUN_COMD requests that fail. RACF also
does not write symptom records for ADMN_ADD_USER requests where the RACF user ID exists and ADMN_DEL_USER
requests where the RACF user
ID does not exist. For the cases where RACF does
write a symptom record, the following additional information is recorded
in the free format area: - First X'64' byte area–Command message output (if any).
This is the first message text string only and is truncated if it
exceeds X'64' bytes in length.
- Next four X'100' byte areas–A copy of the command image
that was executed. The command image is truncated if it exceeds 1024
(decimal) bytes in length.
You can trace the R_admin callable service to obtain information
not included in the symptom records. For information about tracing,
see Tracing the R_admin callable service.
Figure 6 shows
an example of a symptom record created when the R_admin callable service
is able to communicate with the RACF subsystem,
but the command fails.
Figure 6. An
example of a symptom record when a command failsTYPE: SYMPTOM RECORD REPORT: SOFTWARE EDIT REPORT DAY YEAR
REPORT DATE: 014 97
SCP: VS 2 REL 3 ERROR DATE: 014 97
MODEL: 4381 HH MM SS.TH
SERIAL: 111606 TIME: 10:24:10.11
SEARCH ARGUMENT ABSTRACT:
PIDS/5752XXH00 PRCS/00000010 PRCS/00000008 RIDS/IRRREQ00
RIDS/IRRRFR10#L
SYSTEM ENVIRONMENT:
CPU MODEL: 4381 DATE: 014 97
CPU SERIAL: 111606 TIME: 10:24:10.11
SYSTEM: NODE1 BCP: MVS
RELEASE LEVEL OF SERVICE ROUTINE: JBB6604
SYSTEM DATA AT ARCHITECTURE LEVEL: 10
COMPONENT DATA AT ARCHITECTURE LEVEL: 10
SYSTEM DATA: 00000000 00000000 |........|
COMPONENT INFORMATION:
COMPONENT ID: 5752XXH00
COMPONENT RELEASE LEVEL: 240
SERVICE RELEASE LEVEL: HRF2240
DESCRIPTION OF FUNCTION: RACF z/OS UNIX SYSTEM CALLABLE SERV.
PROBLEM ID: IRRREQ
PRIMARY SYMPTOM STRING:
PIDS/5752XXH00 PRCS/00000010 PRCS/00000008 RIDS/IRRREQ00
RIDS/IRRRFR10#L
SYMPTOM SYMPTOM DATA EXPLANATION
--------------- ------------- -----------
PIDS/5752XXH00 5752XXH00 COMPONENT IDENTIFIER
PRCS/00000010 00000010 RETURN CODE
PRCS/00000008 00000008 RETURN CODE
RIDS/IRRREQ00 IRRREQ00 ROUTINE IDENTIFIER
RIDS/IRRRFR10#L IRRRFR10#L ROUTINE IDENTIFIER
SECONDARY SYMPTOM STRING:
ADRS/00000748
SYMPTOM SYMPTOM DATA EXPLANATION
--------------- ------------- -----------
ADRS/00000748 00000748 STORAGE ADDRESS
FREE FORMAT COMPONENT INFORMATION:
KEY = F000 LENGTH = 000100 (0064)
+000 C9D2D1F5 F6F7F0F2 C940C9D5 E5C1D3C9 |IKJ56702I INVALI|
+010 C440C3D3 C1E2E240 D5C1D4C5 6B40C2C1 |D CLASS NAME, BA|
+020 C4C3D3C1 E2E24040 40404040 40404040 |DCLASS |
+030 LENGTH(0048) ==> ALL BYTES CONTAIN X'40'.
+060 40404040 | |
KEY = F000 LENGTH = 000256 (0100)
+000 C1C4C4E4 E2C5D940 C7E4D4C2 E8404040 |ADDUSER GUMBY |
+010 4040D5C1 D4C54040 40404040 40404D7D | NAME ('|
+020 D1968895 40D84B40 C7A49482 A87D5D40 |JOHN Q. GUMBY') |
+030 404040C3 D3C1E4E3 C8404040 4040404D | CLAUTH (|
+040 82818483 9381A2A2 5D40D7C1 E2E2E6D6 |BADCLASS) PASSWO|
+050 D9C44040 40404DA7 A7A75D40 C1C4C4C3 |RD (XXX) ADDC|
+060 C1E3C5C7 D6D9E840 4040404D 8381A3F1 |ATEGORY (CAT1|
+070 5D404040 40404040 40404040 40404040 |) |
+080 LENGTH(0128) ==> ALL BYTES CONTAIN X'40'.
In this example, the RACF subsystem
return code is 8. In the free format component information, the first X'64' byte
area contains the diagnostic message ("IKJ56702I INVALID CLASS NAME,
BADCLASS") produced by executing the command image. The next four X'100' areas
(only 1 in this case) contain the command image itself (ADDUSER
GUMBY NAME('JOHN Q. GUMBY') CLAUTH(BADCLASS) PASSWORD(XXX) ADDCATEGORY(CAT1)).
Note that the actual password value is not recorded.
|