RACF help needed.



All about SAF, RACF, encryption, Firewall, Risk assessment and integrity concepts

RACF help needed.

Postby Balr14 » Tue Oct 05, 2010 11:40 pm

I have an Assembler language mainline program that calls other programs. I didn't write it or link it, but now I need to change it. Before changing it, I ran a test and it ran fine. Then I ran an Assembly and bind to ensure the version of the source code and bind JCL were the same as what was running. Everything matched perfect; source, load image, bind map, etc. The problem is when I execute my version for the same library as the old version, I get this:

10.37.10 JOB00991 +TBVSAM - ABOUT TO LOAD USER PGM
10.37.10 JOB00991 CSV003I REQUESTED MODULE READ/TRA NOT FOUND
10.37.10 JOB00991 CSV028I ABEND806-04 JOBNAME=JOHNTBS1 STEPNAME=STEP01
10.37.10 JOB00991 ICH408I USER(JOHN0 ) GROUP(DEVIDS ) NAME(JOHN XXXXXXXX ) 863
863 IDIXDCAP CL(PROGRAM )
863 INSUFFICIENT ACCESS AUTHORITY
863 FROM IDI* (G)
863 ACCESS INTENT(READ ) ACCESS ALLOWED(NONE )
10.37.10 JOB00991 CSV025I PROGRAM CONTROLLED MODULE IDIXDCAP NOT ACCESSED, USER UNAUTHORIZED

Fortunately, I saved the old version. When I put it back in to the library it runs fine again. I'm not understanding how the same program in hte same load library can fail with RACF errors just because I assembled it. But, I don't know RACF real well.
Balr14
 
Posts: 41
Joined: Fri Oct 01, 2010 9:43 pm
Has thanked: 0 time
Been thanked: 1 time

Re: RACF help needed.

Postby Bill Dennis » Tue Oct 05, 2010 11:51 pm

You have a STEPLIB that is not defined to RACF in a Program-Controlled environment. Your concatenation turns "dirty" and you can't fetch needed modules.
Regards,

Bill Dennis

Disclaimer: My comments on this forum are my own and do not represent the opinions or suggestions of any other person or business entity.
Bill Dennis
 
Posts: 278
Joined: Thu May 15, 2008 9:45 pm
Has thanked: 0 time
Been thanked: 0 time

Re: RACF help needed.

Postby Balr14 » Tue Oct 05, 2010 11:59 pm

I didn't change the STEPLIB DD entries. I just swapped my version of the calling program with an existing one, in the same library.
Balr14
 
Posts: 41
Joined: Fri Oct 01, 2010 9:43 pm
Has thanked: 0 time
Been thanked: 1 time

Re: RACF help needed.

Postby Robert Sample » Wed Oct 06, 2010 12:15 am

Is the program authorized? Did you assemble the replacement program authorized?
Robert Sample
Global moderator
 
Posts: 3720
Joined: Sat Dec 19, 2009 8:32 pm
Location: Dubuque, Iowa, USA
Has thanked: 1 time
Been thanked: 279 times

Re: RACF help needed.

Postby Balr14 » Wed Oct 06, 2010 12:31 am

No. I figured that was the issue, but it's not something I've had to deal with in many years... don't remember how. :oops:
Balr14
 
Posts: 41
Joined: Fri Oct 01, 2010 9:43 pm
Has thanked: 0 time
Been thanked: 1 time

Re: RACF help needed.

Postby enrico-sorichetti » Wed Oct 06, 2010 12:48 am

the manual tells
CSV003I REQUESTED MODULE mod NOT FOUND

where mod should be, as per message text, the name of a load module
but the starting post reports
CSV003I REQUESTED MODULE READ/TRA NOT FOUND

where does READ/TRA come from... just curious!
( i might be missing something anyway )
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 3006
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 165 times

Re: RACF help needed.

Postby Balr14 » Wed Oct 06, 2010 12:52 am

That is the exact message log content, nothing changed or omitted.
Balr14
 
Posts: 41
Joined: Fri Oct 01, 2010 9:43 pm
Has thanked: 0 time
Been thanked: 1 time

Re: RACF help needed.

Postby enrico-sorichetti » Wed Oct 06, 2010 1:16 am

from a manual
Fault Analyzer requires a dump capture exit, IDIXDCAP

does the reference hint something to You ?
why not work a bit with Your support ?
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 3006
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 165 times

Re: RACF help needed.

Postby steve-myers » Wed Oct 06, 2010 1:20 am

This smells like a shell program that loads a program from some sort of parm. The original caller is specifying the program as READ/TRA, where the / is intended as some sort of separator between the program name (READ) and some sort of parameter data (TRA...). If my nose has it right, the real problem could be the program name must be 8 bytes.

The other issue is this IDIXDCAP program. Just out of curiosity I fed it into Google; one of the results was this headline: Installing the MVS change options/suppress dump exit IDIXDCAP. It seems to have something to do with the IBM Fault analyzer product.
steve-myers
Global moderator
 
Posts: 2105
Joined: Thu Jun 03, 2010 6:21 pm
Has thanked: 4 times
Been thanked: 243 times

Re: RACF help needed.

Postby enrico-sorichetti » Wed Oct 06, 2010 1:37 am

revisiting the whole topic
seems to me that You have three issues...
1) - manual reading ( not enough of it )
2) -
10.37.10 JOB00991 CSV003I REQUESTED MODULE READ/TRA NOT FOUND
10.37.10 JOB00991 CSV028I ABEND806-04 JOBNAME=JOHNTBS1 STEPNAME=STEP01

the message sequence is clear You are trying to load something that is not there
done the searching on Your behalf and posting the relevant snippet
806
04
The system could not find the module, whose entry point is the value of the EP or EPLOC operand, in the indicated library (private library, job library, or link library). This situation can occur when LSEARCH=YES is specified on the macro and the limited library search fails to locate the module. For an alias name, ensure that the entry point attributes match that of the load module which was previously loaded (that is, authorization, RMODE, entry point displacement).

Application Programmer Response: If the reason code is X'04', this is probably a user error. Make sure that the requesting program was not incorrectly modified. Make sure that the source library was indicated correctly and that the indicated library does contain the requested program. For an alias name, make sure the alias attributes match the attributes of the load module which was already loaded; check the library authorization, RMODE, and alias entry point displacement). Also, check that there are no duplicate aliases or related primary module names in the library concatenation. MVS expects that all module names, and aliases, are unique across every library. Correct the error, and run the job step again.

if You are working in a zOS-MVS environment You might have some kind of
storage/addressing issues and trying to load garbage instead of a proper module
if working in a zOS-USS environment ... well, good luck
3) - an installation issue with the authorization to IDIXDCAP module

for 1) and 2) You have to work it out Yourself
for 3) work with Your support
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 3006
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 165 times

Next

Return to Mainframe Security

 


  • Related topics
    Replies
    Views
    Last post