FALLBACK Elevation failed for RACF Lpar with error TMR0423E with the return (28) and reason(4) codes.

Products

• Trusted Access Manager for Z

Issue/Introduction

FALLBACK Elevation failed for RACF Lpar.

TRUSTED ACCESS MANAGER FOR Z started task shows errors:

TMR0412E TAMR - Ticket validation failed, see SJVM logs for more details

TMR0423E TAMR - Elevation failure: RC=00000028 RSN=00000004

 

Environment

Product: TRUSTED ACCESS MANAGER FOR Z 

Resolution

Add RACF authorized program control on 3 libraries (see below) for FALLBACK Elevation to run successfully.

SYS1.SCEERUN2//NOPADCHK
SYS1.COMMONSERVICES.CAW0PLD'//NOPADCHK
SYS1.CFH0LINK'//NOPADCHK

 

Additional Information

Please refer to TRUSTED ACCESS MANAGER FOR Z documentation (IBM RACF) Define a Trusted Access Manager for Z for RACF Started Task User ID

Ensure that the Common Components and Services CAW0PLD deployment data set is added to the authorized program list. To add CAW0PLD, issue the following commands:
RALTER PROGRAM * ADDMEM('hlq.deploy.CAW0PLD'//NOPADCHK)
SETROPTS REFRESH WHEN(PROGRAM)        

If this step is not completed, then an error during ticket validation/FALLBACK processing will result in a message similar to the one below:

ICH420I PROGRAM J2ZJNIJ4 FROM LIBRARY SYSx.COMMONSERVICES.CAW0PLD CAUSED THE ENVIRONMENT TO BECOME UNCONTROLLED.                                                                                
BPXP014I ENVIRONMENT MUST BE CONTROLLED FOR SERVER (BPX.SERVER) PROCESSING.