684

Explanation
The module calling the RACF® manager or the RACROUTE REQUEST=LIST or
RACROUTE REQUEST=EXTRACT function is not authorized (is not APF-authorized,
in system key 0-7, or in supervisor state).
Note: If the NEWPASS
keyword is not specified on the REQUEST=VERIFY, you can authorize
the calling module by entering it in the RACF-authorized caller table.
However, you should not place entries in the RACF-authorized caller
table.

System action
The task ends.

Programmer response
Possible user error. Verify that the module
is an authorized caller.

Problem determination
If the request originated as a RACF command (that in turn resulted
in a call to the RACF manager
or the REQUEST=LIST), check to make sure the RACF command is in the list of APF-authorized
commands for your system. Also ensure if the request was from
a RACF command, the command
is registered in TSO as an authorized command (in PARMLIB member IKJTSOxx
under the AUTHCMD section).
If the module making the request
is an IBM® routine, see z/OS Security Server RACF Diagnosis Guide for
information about diagnosing abends and reporting abend problems to IBM.