Invalid message CAL052SF and CAS9034E for security checks for class CATAPE in RACF environment.

Products

• CA 1 Flexible Storage
• CA 1 Tape Management - Copycat Utility
• CA 1 Tape Management - Add-On Options
• Compress Data Compression for MVS
• Compress Data Compression for Fujitsu
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware

Issue/Introduction

Description

CA 1 security checks for CLASS CATAPE incorrectly resulting in CAS9034E - FUNCTION(RESCHECK) CLASS SPECIFIED IS NOT DEFINED; in RACF environment. For example running TMSINIT:

CAL052SF 04 000 STCSYS /TMSINIT /YSVCCOND CAS9034E - FUNCTION(RESCHECK) CLASS SPECIFIED IS NOT DEFINED.

In CAS9SAFC the CLASS translation table translates CATAPE to CA1TAPE, which is correctly defined to RACF, so that above message should not occur.

Solution

The problem can be caused by a wrong version of CAS9SAFC, which does not translate the class names as expected.
If there is no explicit INIT statement for CAIRIM in the CARIMPRM member of CAS9, then module CAS9SAFC is loaded by the first task, that issues a security check. If this task has a STEPLIB with a wrong CAS9SAFC module, then this module is loaded and used for all other subsequent security checks and might be causing CAS9034E - FUNCTION(RESCHECK) CLASS SPECIFIED IS NOT DEFINED.

In order to reload the correct version from either LINKLIST or CAS9 STEPLIB run CAS9 with:

PRODUCT(CAIRIM) VERSION(S910) INIT(S910INIT) PARM(REFRESH(SSF))

To be sure the correct CAS9SAFC version is loaded at IPL time, add the following statement to CARIMPRM member of CAS9:

PRODUCT(CAIRIM) VERSION(S910) INIT(S910INIT) 

Environment

Release:
Component: 1