How do you setup the XFACILIT class profile for IBM Fault Analyzer for z/OS v13.1 with ACF2?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

How to setup the XFACILIT resource class profile for IBM Fault Analyzer for with ACF2?

The XFACILIT resource class is similar to the FACILITY class, but supports longer resource names (up to 246 characters, while the FACILITY class only supports up to 39 characters).

       

Environment

Release: R16
Component:

Resolution

In order to facilitate Java dump capture for IBM Fault Analyzer, ALTER access must be granted to the Fault Analyzer IDI_SDUMP_ACCESS XFACILIT profile. Note that this Resource call is a RACROUTE REQUEST=FASTAUTH CLASS='XFACILIT' STATUS=ACCESS ENTITY=('IDI_SDUMP_ACCESS') call so no ACF2 violations or logging will occur.

The ACF2 equivalent to SAF ALTER access is SERVICE(ADD).

Resource class XFACILIT rules with ALTER access to the user IDs or groups for which Java dump capture is required should be coded.

For example:

SET RESOURCE(XFC)
RECKEY IDI_SDUMP_ACCESS ADD( UID(UID string for user) SERVICE(ADD) ALLOW)              

RACROUTE FASTAUTH calls require that the resource rules be resident. For FASTAUTH calls to process correctly, the resource rules must be made resident in a resource rule directory using the GSO INFODIR record. If the rules are not resident, the call gets a RC=8.
To update the INFODIR record, issue the following commands:

ACF
SET CONTROL(GSO)
CHANGE INFODIR TYPES(R-RXFC)
F ACF2,REFRESH(INFODIR)
F ACF2,REBUILD(XFC)
                         

Note: If the rule is not in place or is incorrect the following IDI0147I error message will be issued.

IDI0147I Alter access to XFACILIT IDI_SDUMP_ACCESS is required for Fault Analyzer SDUMP's.