ACF2

Hoping someone can help with this as I'm tearing my hair out.

I'm working on a JES2 exit and I need to mage a SAF call to validate a resource. I'm using the JES macro $SEAS to do the call and I think I've got everything set up in ACF2 OK but I only ever get a return code of 4 back which says SAF was unable to make an authorization decision. What I've had set up in ACF2 is :-

Insert safdef.myclass id(myclass) jobname(-) mode(global)-

Racroute(request=auth,class=jesclass) userid(-) rep

Insert clasmap.myclass resource(myclass) rsrctype(cls) entityln(8)

and in the exit

$GETMAIN RC,LV=WAVLEN,ERRET=THATSALL
USING WAVE,R3 Address it
LR R3,R1 Get wave address
MVC WAVRACRP(L'RACROUTL),RACROUTL
RACROUTE REQUEST=AUTH,WORKA=WAVRRWK,ATTR=READ, C
ENTITY=JCXJCLA8,LOGSTR=LGSYSSAF,CLASS=MYCLASS, C
RELEASE=77A0,USERID=JCTNOUSR,MF=(M,WAVRACRP)
$SEAS CODER=USER,WAVADDR=(R3),REQUEST=AUTH,FUNCODE=255

.

.

MYCLASS DC AL1(7),C'MYCLASS'
LGSYSSAF DC AL1(L'LGSYSST)
LGSYSST DC C'USER RCLS AUTH CALL'
RACROUTL RACROUTE REQUEST=AUTH,ATTR=READ,CLASS=MYCLASS,MF=L

Kevin,

We recommend turning on ACF2 SECTRACE and re-create the RC 4 problem. The SECTRACE trace

entries will show the RACROUTE call, the ACF2 SAFDEF used and the return codes.

If you need assistance setting up or interpreting the SECTRACE please open a Case and we

will be happy to assist you. Thanks.

regards,

Michael Blaha

ACF2 Support

Michael

I've done the SECTRACE and I see lots of RACROUTE calls but not the one I'm issuing. 

Kevin

Kevin,

Please open a Case at https://support.ca.com/us.html and we can work with you to on your JES2 exit.

Thanks.

regards,

Michael Blaha

ACF2 Support

Michael

I've tried opening a case but each time I get :

We're sorry, this service is temporarily unavailable. Please try again later

Kevin,

I sent you an email but I am not sure the email address on your profile is correct. Can you call CA ACF2 Support directly at 800-225-5224? Thanks.

regards,

Michael Blaha

ACF2 Support

Michael

The email is correct. I'm working on a project for new york life and i'm waiting for confirmation from them as to what their site id is

Kevin Wailes | Technical Consultant | RSM Partners Ltd

Head Office: +44 (0) 1527 837767

Mobile: +44 (0) 7780 254548

Email: kevinw@rsmpartners.com<mailto:kevinw@rsmpartners.com>

Web: www.rsmpartners.com<http://www.rsmpartners.com>

I've got to the bottom of this eventually. The way I was formatting the RACROUTE parameter list was the issue. Now working fine