Running IBM Http server with ITOM application getting S047 abends with ACF2

Products

• CA ACF2
• CA ACF2 - DB2 Option
• CA ACF2 for zVM
• CA ACF2 - z/OS
• CA ACF2 - MISC
• CA LDAP Server for z/OS
• CA PAM Client for Linux for zSeries
• CA Web Administrator for Top Secret

Issue/Introduction

This situation relates to a browser front end to a product called ITOM.

When running product ITOM to review reports there are S047 abends which stop the product working with ACF2

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

 

The S047 abends occur because of racroute requests with STATUS=ACCESS

Sectraces showed RACROUTE REQUEST=AUTH,CLASS=XFACILIT,STATUS=ACCESS.
these were in a non APF AUTHORISED environment.
the entityx values were...
BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.RPRT BJT.ITOM.VIEW.ARCH.DOWNLOAD
BJT.ITOM.VIEW.RPRT.DOWNLOAD BJT.ITOM.VIEW.ARCH.PRINT BJT.ITOM.VIEW.RPRT.PRINT
BJT.ITOM.ADM.FVF BJT.ITOM.ARPT BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.RPRT
BJT.ITOM.VIEW.ARCH.DOWNLOAD BJT.ITOM.VIEW.RPRT.DOWNLOAD
BJT.ITOM.VIEW.ARCH.PRINT BJT.ITOM.VIEW.RPRT.PRINT BJT.ITOM.ADM.FVF
BJT.ITOM.ARPT BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.RPRT
BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.ARCH.DOWNLOAD BJT.ITOM.VIEW.RPRT
BJT.ITOM.VIEW.ARCH.DOWNLOAD BJT.ITOM.VIEW.RPRT.DOWNLOAD
BJT.ITOM.VIEW.ARCH.PRINT BJT.ITOM.VIEW.RPRT.PRINT BJT.ITOM.ADM.FVF
BJT.ITOM.ARPT BJT.ITOM.VIEW.RPRT.DOWNLOAD BJT.ITOM.VIEW.ARCH.PRINT
BJT.ITOM.VIEW.RPRT.PRINT BJT.ITOM.ADM.FVF BJT.ITOM.ARPT
BJT.ITOM.VIEW.ARCH BJT.ITOM.VIEW.RPRT BJT.ITOM.VIEW.ARCH.DOWNLOAD
BJT.ITOM.VIEW.RPRT.DOWNLOAD BJT.ITOM.VIEW.ARCH.PRINT BJT.ITOM.VIEW.RPRT.PRINT

A SAFDEF can be created with a masked entityx to cover all the resources as they all began with BJT.ITOM

ACF
SET CONTROL(GSO)
INSERT SAFDEF.HTTP ID(HTTP) NOAPFCHK MODE(GLOBAL)
RACROUTE(REQUEST=AUTH CLASS=XFACILIT STATUS=ACCESS ENTITYX=BJT.ITOM-)
F ACF2,REFRESH(SAFDEF)
END

This resolved the problem and now everything appears to be working successfully.