Return and reason codes

IRRSPK00 may return the following values in the reason and return code parameters:

SAF return code RACF® return code RACF reason code Explanation
0 0 0 The service was successful.
4 0 0 RACF is not installed.
8 8 0 Invalid function code.
8 8 4 Parameter list error.
8 8 8 An internal error was encountered.
8 8 12 A recovery environment could not be established.
8 8 16 Not authorized to use this service.
8 8 20 High order bit was not set to indicate last parameter.
8 12 8 Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with a 'parameter buffer overflow' return code. This indicates an internal error in IRRSPK00.
8 12 12 Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with an 'unable to allocate storage' return code. The region size for the Security Server Network Authentication Service started task (SKRBKDC) should be increased.
8 12 16 Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with a 'local services are not available' return code. This indicates that the Security Server Network Authentication Service started task (SKRBKDC) address space has not been started or is terminating.
8 12 20 Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with an 'abend in the PC service routine' return code. The symptom record associated with this abend can be found in the logrec data set.
8 12 24 Invocation of the Security Server Network Authentication Service Program Call (PC) interface failed with an 'unable to obtain control lock' return code. This can occur if the task holding the lock is not being dispatched (for example, a dump is in progress).
8 16 X'nnnnnnnn' The Security Server Network Authentication Service was not able to successfully extract the client principal name from the supplied Kerberos V5 ticket. X'nnnnnnnn' is the Kerberos return code. Refer to the Security Server Network Authentication Service documentation for more information.
8 16 28 Unable to generate PassTicket. Verify that the secured signon (PassTicket) function and application ID is configured properly by referring to Using PassTickets in z/OS Security Server RACF Security Administrator's Guide.
8 16 32 PassTicket evaluation failure. Possible reasons include:
  • PassTicket to be evaluated is not a successful PassTicket
  • The PassTicket to be evaluated was already evaluated before and replay protection is in effect.
  • No PTKTDATA profile exists to match the specified application
  • An internal error occurred.
8 16 X'nnnnnnnn' PassTicket evaluation extended failure. X'nnnnnnnn' is the internal reason code for the evaluation failure.
Start of change8End of change Start of change16End of change Start of changeX'nnnnnnnn'End of change Start of changePassTicket generation extended failure. X'nnnnnnnn' is the internal reason code for the generation failure.End of change