search cancel

NETVIEW issue with ACF2 RACROUTE REQUEST=AUTH,CLASS=APPL validations being ignored

book

Article ID: 244344

calendar_today

Updated On:

Products

ACF2 - z/OS

Issue/Introduction

NetView specifies CLASS=APPL on a RACROUTE REQUEST=VERIFY but the validation is being ignored.
 ACF2 doesn't have this checking implemented which is why the VERIFY in ACF2 is working , but the RACF VERIFY fails.

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

Create a safdef to validate all appl validations with REQSTOR=ACF9CSFV.
Then control which APPL resources will be validated and which will be ignored. 

ACF
SET CONTROL(GSO)  
INSERT SAFDEF.APPL ID(APPL) MODE(GLOBAL) 
RACROUTE(REQUEST=AUTH CLASS=APPL REQSTOR=ACF9CSFV)  
F ACF2,REFRESH(SAFDEF)
END

Write rules for all applications to be selectively protected and then write one
rule with a $KEY(********) allowing everyone access.

The default type code for APPL is SAF.
It is recommended to change this to a unique resource type e.g. APL

ACF
SET CONTROL(GSO)
INSET CLASMAP.APPL RESOURCE(APPL) RSRCTYPE(APL)
F ACF2,REFRESH(CLASMAP)
END