RACF 282-54 abend in RCM/RCU Analysis

Products

• RC/Update for DB2 for z/OS
• RC/Migrator for DB2 for z/OS

Issue/Introduction

An RC/Update for Db2 (RCU) or RC/Migrator for Db2 (RCM) analysis fails with RACF error ICH409I 282-054 when processing a .AUTH command in Batch Processor.

ICH409I 282-054 ABEND DURING RACHECK PROCESSING

If the abend occurs in the Snapshot Analysis, then the following error message is also issued:

BPA0071E: CALLED PROGRAM RML@SNAP ABENDED. ABEND CODE U8192 REASON CODE
           00000054 - PROCESSING TERMINATES.   

If the abend occurs in the Analysis, then the following error message is issued:

BPA072E JOB jobname ABENDED.  ABEND CODE S282   REASON CODE 0054

 

Cause

The RACF documentation provides the following explanation for this error:

Security Server RACF Messages and Codes   

 *ICH409I 282-054 ABEND DURING RACHECK PROCESSING 

282

Explanation                                                                
                                                                           
An error was detected by RACF in the parameters passed to RACF for RACHECK 
request processing.                                 

Reason code                        

54                                                                            
   Invalid length entered for the entity name length:                         
                                                                              
   Less than zero                                                          
                                                                              
   Greater than 44 if CLASS=DATASET, or greater than the length for that   
   class as defined in the class-descriptor table                          
                                                                              
   Greater than 44 if CLASS=DATASET, or greater than the maximum length for
   that class as defined in the class-descriptor table.    

So it is indicating that there is a problem with the length specified for the entity.

Resolution

As per the documentation, ensure that a maximum length is specified.

The sample RACF commands provided in the documentation are as follows:

1. Define the CADB2 resource class (dynamic CDT entry):
   RDEFINE CDT CADB2-
   CDTINFO(DEFAULTUACC(NONE)) FIRST(ALPHA) MAXLENGTH(255)-
   OTHER(ALPHA,NUMERIC,NATIONAL,SPECIAL)-
   POSIT(20) OPER(NO) RACLIST(REQUIRED))
   SETROPTS RACLIST(CDT) REFRESH

2. Grant user access to the specified entities:
   RDEFINE CADB2 service.function UACC(NONE) OWNER(SECURITY) RALT CADB2
   PERMIT service.function CLASS(CADB2) ID(userid) ACCESS(READ)
   SETROPTS RACLIST(CADB2) REFRESH

Additional Information

For further information, please refer to the SAF-Based Security Authorizations documentation, specifically for the AUTH function.