CA ACF2

Tuesday Tip: ACF2 setup for the IBM Fault Analyzer for z/OS v13.1 XFACILIT class profile

  • 1.  Tuesday Tip: ACF2 setup for the IBM Fault Analyzer for z/OS v13.1 XFACILIT class profile

    Posted 12-31-2014 03:21 PM

    How to setup the XFACILIT class profile for IBM Fault Analyzer for z/OS v13.1 with ACF2?

     

    In order to facilitate Java dump capture for IBM Fault Analyzer, ALTER access must be granted to the Fault Analyzer IDI_SDUMP_ACCESS
    XFACILIT profile. Note that this Resource call is a RACROUTE REQUEST=AUTH CLASS='XFACILIT' STATUS=ACCESS ENTITY=('IDI_SDUMP_ACCESS') call so no ACF2 violations or logging will occur.

     

    The ACF2 equivalent to SAF ALTER access is SERVICE(ADD).

     

    Resource class XFACILIT rules with ALTER access to the user IDs or groups for which Java dump capture is required should be coded.
    For example:

     

    SET RESOURCE(XFC)
    RECKEY IDI_SDUMP_ACCESS ADD( UID(UID string for user) SERVICE(ADD) ALLOW)   

                                         

    Note:
    If the rule is not in place or is incorrect the following IDI0147I error message will be issued.

     

    IDI0147I Alter access to XFACILIT IDI_SDUMP_ACCESS is required for Fault Analyzer SDUMP's.