ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

MVS ROUTE command problems between ACF2, Top Secret, and RACF systems in a sysplex

book

Article ID: 239825

calendar_today

Updated On:

Products

ACF2 - z/OS Top Secret

Issue/Introduction

Running sysplexes with ACF2, Top Secret, and RACF on LPARs.
Can the MVS ROUTE command  be used to send commands and get responses from all of the systems in the sysplex?
Should the ROUTE command work from any system to any system no matter what the security software is? 

example:  route *all,d logrec 

From a TSS system to a RACF system
MZQ      RESPONSES ---------------------------------------------------  
 IEE480I D COMMAND ABEND 283-00000054, TERMINATED                       
MZS      RESPONSES ---------------------------------------------------  
 IEE480I D COMMAND ABEND 283-00000054, TERMINATED                       

 

 

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

 IEE480I D COMMAND ABEND 283-00000054, TERMINATED

ACF2 and Top Secret can send and receive commands to each other and process the opercmds validation.
ACF2 and Top Secret can receive and process command from RACF and process the opercmds
resource validations.
RACF cannot receive and process OPERCMDS from ACF2 or Top Secret..

For further clarity, here is a description of the S283-54 abend from RACF messages and codes....

54
The ENVRIN keyword was specified and the ENVR
object contained in the ENVR object storage area
was larger than the ENVR object storage area
specified.
This can be caused by using an ENVR object from
another external security manager. For example,
MCS console services routes commands from
other systems with ENVRIN data.