ACF01004 LOGONID sysa NOT FOUND observed when NJE from RACF /JES2 to ACF2 /JES3.

Products

• ACF2 - z/OS

Issue/Introduction

Attempting to configure internal NJE nodes to accept jobs initiated from JES2 /RACF to execute on JES3 /ACF2 without specifying the userid and password on the jobcard. 
How can this be accomplished? 

The GSO NJE option setting are :

  NODE       VALIDATE    VALIDATE   INHERIT-       SEND         DEFAULT   SYSOUT
NAME OR      INCOMING    OUTGOING    ANCE         ENCRYPTED     LOGONID   DEFAULT
  MASK        JOBS         JOBS     ALLOWED       PASSWORD                LOGONID
(BOTH)        (IN)        (OUT)      (IN)          (OUT)         (IN)     (IN)  
=======     ========      ========  ========     ========      =======   =======   
********      YES           NO        YES           NO          <NONE>    <NONE>

• There are three internal systems -
  
  SYSA   (JES2 /RACF),
  SYSB   (JES3 /ACF2),
  SYSC   (JES3 /RACF).  
  
  When a JOB is submitted to SYSA to SYSB and SYSC, the job executes on SYSC as expected using
  credentials from SYSA without the user/password specified on the job card.

The same job routed to SYSB results in;

ACF01004 LOGONID SYSA NOT FOUND ç LOGONID is not submitters name, but is the node name. 
ACFJ225 JOB SUBMISSION NOT AUTHORIZED
IAT6100 (JOBnnnnn) JOB USER123 (JOBnnnnn), PRTY=0n, ID=USERID1 ç JES seem to have obtained the submitter’s ID
JOB FAILS - The node id is not defined as a valid LID.

A trace of the NJE traffic from SYSA to SYSB shows the information as expected in the NJE header sections on the transmit and receive records.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Enhanced ACF2 JES3 / JES3+ interface to recognize inbound NJE inheritance data from non-ACF2 nodes.
Apply published solution : LU02567 - ACF2 JES3 LOGONID INHERITANCE FROM NON-ACF2 SENDERS