ACF2 setup for z/OS using SDSF internal security: ISF458E Not authorized to connect to the SDSF server

Products

• ACF2

Issue/Introduction

After upgrading to z/OS 2.4, logonid is getting following error message when accessing SDSF

ISF458E Not authorized to connect to the SDSF server.  Verify read    
access to the ISF.CONNECT.system resource in the SDSF class.          
***                                                                   

 

 

Environment

Release : 16.0

Component :

Resolution

The SAFDEF to ignore the RACROUTE FASTAUTH call for ISF.CONNECT resource is needed to fix ISF458E Not authorized to connect to the SDSF server error when SDSF is using internal security based on ISFPARMS.

ACF
SET CONTROL(GSO)
Insert SAFDEF.FSDSF ID(FSDSF) MODE(IGNORE) RACROUTE(REQUEST=FASTAUTH,CLASS=SDSF)
F ACF2,REFRESH(SAFDEF)

The SECTRACE can be run to verify RACROUTE call for ISF.CONNECT resource is getting SFR/RFR=8/8:0 and the ISF458E message.

The SDSF ISFPARMS AUXSAF needs to be set to value "NOFAILRC4" to ignore RC=4 and revert back to ISFPARMS for internal security processing.