ACF2 R(TGR) rules for validating GROUP by Program ACFFFPNL
Article ID: 135227
Updated On:
Products
Issue/Introduction
An STC generates a validation call against R(TGR) with resource ********.
Why does this occur?
DATE TIME SOURCE JNAME LID NAME DISP REC SERV LOOKUP-KEY
PRE PST RMC INT FIN UID CPU MODULE KEY-MOD DSP-MOD
MLS USER-SECLABEL RSRC-SECLABEL MODE SRC RRC RSN
19.205 07/24 09.33.23.41 STCINRDR D2X1WLMA DB2HLO1 IDAA LOADER -P RULE TRC READ RTGR-********
0 0 0 4 4 CA4010010PLX3 DxxHLO1 abcd ACFFFPNL DIRECTRY - RTGR-********
RESOURCE NAME: ********
Why is this validation occurring.
What is ACFFFPNL?
Environment
Release : 16.0
Component : CA ARCSERVE WINDOWS SIMPLIFIED CHINESE
Resolution
When an init_usp request is issued to "signon" to omvs ACF2 will create a list of all the groups that a user is connected to and places that in a control block attached to the acee.
This is done by program ACFFFPNL which checks the users access to every resource rule that is written in type(TGR). If there is a rule with $KEY(*******) and the user has access, it will be added to the list of grouops for this user.
If the user has trace on the logonid, all access checks will be logged to SMF and reported with the requesting program name being ACFFFPNL.
If the user does not have trace, there are no loggings of the TGR validations.
Feedback
