I changed a rule to give someone access. This is a resident resource rule and I rebuilt the directory. The new rule worked. I then tried the new rule on an LPAR that shares the database and the rule did not allow the access. What might have gone wrong?


Article ID: 17880


Updated On:


CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC CA PanApt CA PanAudit



There are several reasons why this may not have worked for the sharing LPAR, but one simple action might resolve this problem.
You must ensure that you rebuild the directory on all sharing systems.


When you change a rule that is resident, you will get a message to say that the directory needs to be rebuilt.

 ACF60028 RESOURCE xxxxxxxx REPLACED       
 ACF60039 Issue the F ACF2,REBUILD(SAF) command to activate the rule 

This will remind you to rebuild the directory on the local system - but you will also need to rebuild it on all other LPARS that are sharing this database.

If you do not rebuild the directory, the original rules will stay in effect on those LPARS - until a rebuild or an IPL.

This also applies to resident access rules (GSO RESRUL) when F ACF2,RELOAD(index) will be required.


Release: ACF2..001AO-15-ACF2