Learn it on Mainframe Path. Do it with MainframeKit.Learn on Mainframe Path ▸
MainframeKit

RACF messages and security codes

RACF ICH and IRR messages, security abends and SAF return codes. 17 codes, most common first.

17 CODES

ICH408IRACF MESSAGEAccess denied or logon refusedRACF refused a request.S047SYSTEM ABENDUnauthorized program used a restricted serviceA program that is not APF-authorized issued a service call that only authorized programs may use, so the system ended it with abend 047.S306SYSTEM ABENDProgram fetch (LINK/LOAD/ATTACH/XCTL) failedThe system could not load a program for a LINK, LOAD, ATTACH or XCTL request.SAF-RC-8SAF / RACF RETURN CODESAF return code 8: request failedRACF, the SAF router or its exit processed the request and refused it.ICH409IRACF MESSAGERACF abend during a security requestRACF itself, or a program calling it, abended while handling a security request such as a user verify or an authority check.S282SYSTEM ABENDRACF reported a bad RACROUTE requestRACF found an error in the parameters of a security request.SAF-RC-4SAF / RACF RETURN CODESAF return code 4: no decision madeThe security request was not processed: neither accepted nor refused.SAF-RC-0SAF / RACF RETURN CODESAF return code 0: request successfulThe security product completed the request successfully.ICH420IRACF MESSAGEProgram from an uncontrolled libraryA program was loaded that is not defined as controlled, so the environment is marked uncontrolled.IRR012IRACF MESSAGEVerification failed: user profile not foundRACF has no user profile for the user ID the job is associated with, so the verify request failed.IRR013IRACF MESSAGEVerification failed: invalid passwordThe password supplied did not match the one held in the user's RACF profile.IRR014IRACF MESSAGEVerification failed: expired passwordThe password given has expired, so a new one is needed before the job or logon can go ahead.IRR017IRACF MESSAGEVerification failed: revoked at group levelThe group is valid for the user, but the user's access through that group has been revoked, so the job ends with no steps run.IRR018IRACF MESSAGEVerification failed: OIDCARD requiredThe user ID needs an operator identification card at entry, which a batch job cannot supply, so the job ends.ICH51011IRACF MESSAGERACF manager ended due to errorRACF's data manager could not finish a command because of an error it does not recognise.ICH51003IRACF MESSAGEName not found in RACF data setA RACF command asked for a profile that is not in the RACF database.ICH09020IRACF MESSAGEProfile not defined to RACFA RACF command named a profile that RACF could not find on the database.