Running IBM Http server with ITOM application getting S047 abends with ACF2

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• LDAP SERVER FOR Z/OS
• PAM CLIENT FOR LINUX ON MAINFRAME
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

This situation relates to a browser front end to a product called ITOM.

When running product ITOM to review reports there are S047 abends which stop the product working with ACF2

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

 

The S047 abends occur because of racroute requests with STATUS=ACCESS

Sectraces showed RACROUTE REQUEST=AUTH,CLASS=XFACILIT,STATUS=ACCESS.
these were in a non APF AUTHORISED environment.
the entityx values were...
XXX.XXXX.VIEW.AAAA XXX.XXXX.VIEW.RPRT XXX.XXXX.VIEW.AAAA.DOWNLOAD
XXX.XXXX.VIEW.RPRT.DOWNLOAD XXX.XXXX.VIEW.AAAA.PRINT XXX.XXXX.VIEW.RPRT.PRINT
XXX.XXXX.ADM.FVF XXX.XXXX.ARPT XXX.XXXX.VIEW.AAAA XXX.XXXX.VIEW.RPRT
XXX.XXXX.VIEW.AAAA.DOWNLOAD XXX.XXXX.VIEW.RPRT.DOWNLOAD
XXX.XXXX.VIEW.AAAA.PRINT XXX.XXXX.VIEW.RPRT.PRINT XXX.XXXX.ADM.FVF
XXX.XXXX.ARPT XXX.XXXX.VIEW.AAAA XXX.XXXX.VIEW.RPRT
XXX.XXXX.VIEW.AAAA XXX.XXXX.VIEW.AAAA.DOWNLOAD XXX.XXXX.VIEW.RPRT
XXX.XXXX.VIEW.AAAA.DOWNLOAD XXX.XXXX.VIEW.RPRT.DOWNLOAD
XXX.XXXX.VIEW.AAAA.PRINT XXX.XXXX.VIEW.RPRT.PRINT XXX.XXXX.ADM.FVF
XXX.XXXX.ARPT XXX.XXXX.VIEW.RPRT.DOWNLOAD XXX.XXXX.VIEW.AAAA.PRINT
XXX.XXXX.VIEW.RPRT.PRINT XXX.XXXX.ADM.FVF XXX.XXXX.ARPT
XXX.XXXX.VIEW.AAAA XXX.XXXX.VIEW.RPRT XXX.XXXX.VIEW.AAAA.DOWNLOAD
XXX.XXXX.VIEW.RPRT.DOWNLOAD XXX.XXXX.VIEW.AAAA.PRINT XXX.XXXX.VIEW.RPRT.PRINT

A SAFDEF can be created with a masked entityx to cover all the resources as they all began with XXX.XXXX

ACF
SET CONTROL(GSO)
INSERT SAFDEF.HTTP ID(HTTP) NOAPFCHK MODE(GLOBAL)
RACROUTE(REQUEST=AUTH CLASS=XFACILIT STATUS=ACCESS ENTITYX=XXX.XXXX-)
F ACF2,REFRESH(SAFDEF)
END

This resolved the problem and now everything appears to be working successfully.