ACF04056 and a NO-REC *VIO in ACFRPTRV, but there is a valid rule.

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

A valid surrogate rule is in the RULES database,  but the ACFRPTRV resource validation report shows a NO-REC violation. Error message ACF04056 may also have been issued. Why is this happening?

Here is the rule and the violation report.

ACF75052 RESOURCE RULE EZB STORED BY xxxxxx ON 02/02/08-13:38
$KEY(EZB) TYPE(SER)
 - UID(*) ALLOW
ACF75051 TOTAL RECORD LENGTH= 188 BYTES, 4 PERCENT UTILIZED

RSER-EZB.STACKACCESS.sys1.TCPIP                 *VIO  RSER-EZB
BPXOINIT                 STCINRDR sys1 ACF9CFAT NO-REC      -        -               READ
08.256 12/09 11.50 SYSLOGD1 BPXOINIT BPXOINIT STCID         0   8   0   0  16

SAF RESOURCE CLASS SERVAUTH

 

 

Environment

Release:
Component: ACF2MS

Cause

The ACFRPTRV resource validation report shows module ACF9CFAT was called, which is the module used by ACF2 for RACROUTE REQUEST=FASTAUTH calls.

If the resource call is a FASTAUTH call or the rule uses a masked $KEY then the resource type code must be resident. If the rules are not resident, the call gets a RC=8. For example the following resource rule has masking in the $KEY:

$KEY(********) TYPE(SER)
 STACKACCESS.- UID(*****USER001) ALLOW

Resolution

The 3-letter resource type code seen to the right of *VIO must be added to the INFODIR record to make it a resident directory.

TSO ACF
SET CONTROL(GSO)
CHANGE INFODIR TYPES(R-RSER) ADD
F ACF2,REFRESH(INFODIR)
F ACF2,REBUILD(SER)
END

NOTE: After this is done, if any changes are made to a TYPE(SER) rule, or a TYPE(SER) rule is added or deleted, the REBUILD command must be executed again.