z/OS Security Server RACF Messages and Codes
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


IRRI007I

z/OS Security Server RACF Messages and Codes
SA23-2291-00

IRRI007I
ATTENTION: LOCAL NODE local-node HAS A DIFFERENT SETROPTS PASSWORD(RULEx) THAN PARTNER NODE partner-node.

Explanation

This is a warning message only. You can choose whether to act immediately. RACF® checks certain data between the partner node and the local node to determine whether a command could run on one node but not the other. The SETROPTS PASSWORD(RULEx) is one of these types of data and a mismatch is detected. As a result, a change in password may be accepted on one node but rejected on the other node unless the SETROPTS password rules match.

When the password rules are the same, they do not need to be listed in the same order on both nodes.

System action

If no error messages are issued with this warning message, RACF still attempts to move this node pair into the OPERATIVE ACTIVE state. Message IRRI001I tells you when the OPERATIVE ACTIVE state is reached.

System programmer response

Evaluate the SETROPTS password rule listed in the message. These SETROPTS password rules must be consistent when you want two RACF nodes to communicate with each other. You should use the SETROPTS command to change one or both nodes so that the SETROPTS password rules are consistent. If you plan to allow RACF to synchronize passwords between these nodes, the existing sets of password rules must be merged into a single set that contains the most restrictive of the original rules. Both nodes should then use this new set of rules. This prevents acceptable passwords on one node from failing on a more restrictive node. When the SETROPTS options are consistent, this message does not appear when the two nodes TARGET each other.

Routing code

2 and 9

Descriptor code

4

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014