ACF2 not initialized causing IFA707I SMF CANNOT CONNECT TO LOGSTREAM REASON=SAF RESOURCE WAS NOT DEFINED

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• LDAP SERVER FOR Z/OS
• PAM CLIENT FOR LINUX ON MAINFRAME
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

We recently implemented a SMF INMEM resource dynamically by using SET SMF=.

When we subsequently IPLd the system, we received IFA707I SMF CANNOT CONNECT TO LOGSTREAM IFASMF.sys1.INMEM 
REASON=SAF RESOURCE WAS NOT DEFINED. This resulted in lost SMF data as IFA707I causes the SMF LOGSTREAM settings to be rejected.   

Review  of the syslog appears to show the SMF address space initializing and generating the IFA707I  prior to ACF2 address space initialization.

Subsequently doing a SET SMF= defines the SMF logstream environment correctly with no IFA707I, and the INMEM resource is available   

                
 

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Broadcom and IBM suggests to use INMEM in different SMF PARMLIB, and activate this SMFPRMxx once ACF2 is initialized. You can use an automated operator to look for ACF2 initialization and then activate the different SMF. ACF2 requires SMF to be up before any requests are processed so that proper auditing can be done.