I am starting CIM Server and getting error message 'CEZ10000E: Unable to obtain a passticket for GPMSERVE. RACF permissions probably missing.", how do I setup Passtickets for GPMSERVE?

Document ID:  TEC1231777
Last Modified Date:  08/01/2017
{{active ? 'Hide' : 'Show'}} Technical Document Details

Products

  • CA ACF2 for z/OS

Components

  • CA ACF2 for z/OS:ACF2MS
Question:

I am starting CIM Server and getting error message 'CEZ10000E: Unable to obtain a passticket for GPMSERVE. RACF permissions probably missing.", how do I setup Passtickets for GPMSERVE?

Answer:

RACF/ACF2 Setup to use PassTicket Services for GPMSERVE

  • Activate the PTKTDATA class and the SETROPTS RACLIST processing, using the following example:

SETROPTS CLASSACT(PTKTDATA) RACLIST(PTKTDATA) GENERIC(PTKTDATA)

 

ACF2 equivalent: Not Required

  • Define the application GPMSERVE to your security product.

The application is defined through the SAF profile GPMSERVE in class PTKTDATA.  is the secret passkey shared with the application. See the following example:

RDEFINE PTKTDATA GPMSERVE SSIGNON(KEYMASKED())

SETROPTS RACLIST(PTKTDATA) REFRESH

 

ACF2 equivalent:

 

ACF

SET PROFILE(PTKTDATA) DIVISION(SSIGNON)

INSERT GPMSERVE SSKEY(c237d18425cfe12d)

 

Note: SSKEY value above is an example

  • Define an access profile for the PassTicket service, as shown in the following example:

RDEFINE PTKTDATA IRRPTAUTH.GPMSERVE.* UACC(NONE)

 

ACF2 equivalent: Not Required

  • Grant the CIM server UPDATE access to the generic profile IRRPTAUTH.GPMSERVE.* in class PTKTDATA.

This enables the CIM server user to create PassTickets on behalf of other users for authentication with GPMSERVE. See the following example:

PERMIT IRRPTAUTH.GPMSERVE.* CL(PTKTDATA) ID(CFZSRV) ACCESS(UPDATE)

 

ACF2 equivalent:

 

ACF

SET RESOURCE(PTK)

RECKEY IRRPTAUTH ADD( GPMSERVE.- UID(****************CFZSRV) - SERVICE(UPDATE,READ) ALLOW)

 

  • Activate the changes, using the following example:

SETROPTS RACLIST(PTKTDATA) REFRESH

 

ACF2 equivalent:

 

ACF

F ACF2,REBUILD(PTK),CLASS(P)

Please help us improve!

Will this information enable you to resolve your issue?

Please tell us what we can do better.

{{feedbackText.length ? feedbackText.length : '0'}}/255

{{status}}

Not what you were looking for?

Search Again >

Product Information

Support by Product >

Communities

Join a Community >