ACF2, SDSF error ISF005I INVALID IDEST FOR ACTRP05 0 NOT SPECIFIED***

Products

• ACF2 - z/OS

Issue/Introduction

Migrating to zos 2.5. Created many SDF rules for the ISFPARM conversion, but still get the error below when entering SDSF:

ISF005I INVALID IDEST FOR USER001 0 NOT SPECIFIED ***

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

Based on SDSF documentation the ISF005I 'nnnn NOT SPECIFIED' is related to the resource class SDSF resource ISFOPER.ANYDEST.jesx. Sites can run the ACFRPTRV report to see the resource being validated, the rule that was used and why access was not granted. Resource class SDSF defaults to TYPE(SAF) however most sites will INSERT a GSO SAFDEF to map the resource class to a unique type code as SDF.

Based on the above a possible rule to address the ISF005I might look like:

ACF
SET RESOURCE(SDF)
RECKEY ISFOPER ADD(ANYDEST.jesx UID(uid string for user) SERVICE(READ) ALLOW)

* jesx is the name of the JES subsystem. For example, it might be JES2, JESA, or, to protect all JES2 subsystems, JES%.

SDSF Destination names can be protected by two resources:

• ISFOPER.ANYDEST.jesx for any destination name on the DEST command or IDEST list(all destinations)
• ISFAUTH.DEST.destname for specific destination names on the DEST command or IDEST list.