How to resolve ACF00042 ACMCB/ACUCB NOT ALLOWED - INVALID AUTHORITY while running ACFMERGE utility batch job?

book

Article ID: 5807

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC CA PanApt CA PanAudit

Issue/Introduction

I am running The ACFMERGE utility batch job and getting message ACF00042 ACMCB/ACUCB NOT ALLOWED - INVALID AUTHORITY.

I gave the userid MUSASS and MUSUPDT, then ran ACFMERGE that resulted in following message.

ACF02031 NOT AUTHORIZED TO USE CONDITIONAL BYPASS PROCESSING

Cause

ACF00042 message reason: The request the CA ACF2 SVC-A routines processed specifies a user control block (ACUCB or ACMCB), but the requestor lacks the proper authority. This type of request requires APF authorization or the CA ACF2 MUSASS attribute.

ACF02031 message reason: A non-APF-authorized caller issued an SVC-A ACALT request and asked for the conditional bypassing of processing routines by setting the ACACNTL/ACACBPRC flag in the ACALT parameter list.

 

Environment

CA ACF2 for z/OS release 15 and 16.

Resolution

This macro requires not only Library APF authorization, but also SETCODE AC(1). If you browse the library, there is a column for the AC value. It will be either 00 or 01. Programs with value of 00 means the program is not authorized, and a value of 01 means it is authorized.

 ACFMERGE needs to be 01. Here is a relink JCL example: 

//S0000263 EXEC PGM=IEWL, 
//      PARM='LIST,MAP,XREF,AMODE=31,REUS(RENT),RMODE=ANY' 
//SYSLIB DD DISP=SHR,DSN=SCEELKEX 
//           DD DISP=SHR,DSN=SCEELKED 
//           DD DISP=SHR,DSN=CSSLIB 
//SYSLMOD DD DISP=SHR,DSN=CAI.CAX1LINK 
//SYSDEFSD DD DUMMY 
//AAX1MOD0 DD DISP=SHR,DSN=AAX1MOD0 
//SYSLIN DD * 
ORDER ACF50MRG 
INCLUDE AAX1MOD0(ACF50MRG) 
INCLUDE AAX1MOD0(ACF$GCVT) 
ENTRY ACF50MRG 
SETCODE AC(1) 
NAME ACFMERGE(R) 

In order to resolve the issue please Relink load module ACFMERGE and change SETCODE AC(0) to SETCODE AC(1), then submit ACFMERGE to successfully update the ACF2 database.

 

Additional Information

For further information on ACFMERGE - Merge Password Information in Database, please review following link:

https://docops.ca.com/ca-acf2-for-z-os/16-0/en/reporting/utilities-for-ca-acf2-administration/acfmerge-merge-password-information-in-database