Running IBM Http server with ITOM application getting S047 abends with ACF2

Article Id: 193372

Status: Published

Updated On: 01-07-2020 10:57

Products:

CA ACF2 , CA ACF2 - DB2 Option , CA ACF2 for zVM , CA ACF2 - z/OS , CA ACF2 - MISC , CA LDAP Server for z/OS , CA PAM Client for Linux for zSeries , CA Web Administrator for Top Secret

Issue/Introduction:

This situation relates to a browser front end to a product called ITOM.

When running product ITOM to review reports there are S047 abends which stop the product working with ACF2

Environment:

Release : 16.0

Component : CA ACF2 for z/OS

Resolution:

The S047 abends occur because of racroute requests with STATUS=ACCESS

Sectraces showed RACROUTE REQUEST=AUTH,CLASS=XFACILIT,STATUS=ACCESS.
these were in a non APF AUTHORISED environment.
the entityx values were...
BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.RPRT BJT.ITOM.VIEW.ARCH.DOWNLOAD
BJT.ITOM.VIEW.RPRT.DOWNLOAD BJT.ITOM.VIEW.ARCH.PRINT BJT.ITOM.VIEW.RPRT.PRINT
BJT.ITOM.ADM.FVF BJT.ITOM.ARPT BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.RPRT
BJT.ITOM.VIEW.ARCH.DOWNLOAD BJT.ITOM.VIEW.RPRT.DOWNLOAD
BJT.ITOM.VIEW.ARCH.PRINT BJT.ITOM.VIEW.RPRT.PRINT BJT.ITOM.ADM.FVF
BJT.ITOM.ARPT BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.RPRT
BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.ARCH.DOWNLOAD BJT.ITOM.VIEW.RPRT
BJT.ITOM.VIEW.ARCH.DOWNLOAD BJT.ITOM.VIEW.RPRT.DOWNLOAD
BJT.ITOM.VIEW.ARCH.PRINT BJT.ITOM.VIEW.RPRT.PRINT BJT.ITOM.ADM.FVF
BJT.ITOM.ARPT BJT.ITOM.VIEW.RPRT.DOWNLOAD BJT.ITOM.VIEW.ARCH.PRINT
BJT.ITOM.VIEW.RPRT.PRINT BJT.ITOM.ADM.FVF BJT.ITOM.ARPT
BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.RPRT BJT.ITOM.VIEW.ARCH.DOWNLOAD
BJT.ITOM.VIEW.RPRT.DOWNLOAD BJT.ITOM.VIEW.ARCH.PRINT BJT.ITOM.VIEW.RPRT.PRINT

A SAFDEF can be created with a masked entityx to cover all the resources as they all began with BJT.ITOM

ACF
SET CONTROL(GSO)
INSERT SAFDEF.HTTP ID(HTTP) NOAPFCHK MODE(GLOBAL)
RACROUTE(REQUEST=AUTH CLASS=XFACILIT STATUS=ACCESS ENTITYX=BJT.ITOM-)
F ACF2,REFRESH(SAFDEF)
END

This resolved the problem and now everything appears to be working successfully.