AAM MAAGFVIP job gets MFA30208 error on ACF2 system

Products

• Advanced Authentication Mainframe
• ACF2
• ACF2 - MISC
• ACF2 - z/OS

Issue/Introduction

Advanced Authentication Mainframe (AAM) MAAGFVIP job receives the following error when trying to SET the factor information on an ACF2 system:

A SAF error occurred while retrieving or setting general factor data. SAFRC=8, RACFRC=16, RACFRSN=144000.
 com.ca.security.mfa.j2z.common.exception.SafException: MFA30208: Unexpected IRRSFA64 return code.

Resolution

The user submitting the GET and SET options in MAAGFVIP cannot have the MUSASS attribute on their logonid. Remove the MUSASS attribute from the LID and re-try the job.

ACF2 commands to remove the attribute:

SET LID
CHA logonid NOMUSASS