book
Article ID: KB0092240
calendar_today
Updated On:
Description
Resolution:
Description:
The security classes HRNCO and HRNEE are non-standard security names and raise assembly warnings within RACF since they do not conform to IBM's z/OS RACF policy found in the "Security Server RACF Macros and Interfaces" (SA22-7682-13) manual page 3 which states for the ICHERCDE macro definition:
"CLASS=class name
Specifies the name of the resource class. The name must be 1–8 characters long and must consist of the following: A through Z, 0 through 9, or # (X'7B'), @ (X'7C'), $ (X'5B'). The first character must be A through Z, # (X'7B'), @ (X'7C'), or $ (X'5B'). You must include a # (X'7B'), @ (X'7C'), $ (X'5B'), or numeric character in the name of any class you define in order to guarantee that installation-defined classes do not conflict with classes supplied by IBM. In this way, classes supplied by IBM should always have unique class names. If this rule is not followed, the assembler issues a severity 4 MNOTE warning."
Environment:
TIBCO ObjectStar Integration Foundation for z/OS 4.0.x
TIBCO ObjectStar for z/OS 4.1.x
TIBCO Object Service Broker for z/OS 5.0.0
Operating System(s) impacted:
z/OS systems running RACF security software
Symptoms
Assembly warning message:
4,*** CLASS NAME DOES NOT CONTAIN NATIONAL CHARACTER OR DIGIT ***
Resolution
TIBCO Object Service Broker for z/OS 5.0.0 now uses the product prefix S6B for messages, modules and RACF resource names. This prefix is registered with IBM for the exclusive use of TIBCO products. See TIBCO Object Service Broker for z/OS 5.0.0 CNTL file, members SECCORAC and SECEEACF, for a description of the changes and compatibility options provided.
Summary of Resource Names:
DOB Default pre-ObjectStar 5.0
Parameter Value Value
------------ ------------- --------------------
SECCLASS S6BDOB HRNCO
SECREQUESTOR S6BDOBOP HRNCROPS
SECSUBSYSTEM S6B HURON
EE Default
Parameter Value pre-ObjectStar 5.0
------------ ------------- --------------------
SECCLASS S6BEE HRNEE
SECREQUESTOR S6BEEOP HRNDROPS
SECSUBSYSTEM S6B HURON
Issue/Introduction
Objectstar for z/OS 4.0 and 4.1.1 RACF security classes HRNEE and HRNCO are incompatible with IBM z/OS security class naming conventions.