351E

NEXTKEY loop, check rules ‑ last key was <key>

Reason

This message indicates that you referenced the same rule set twice during a single validation call. This occurs when access validation is directed from one rule set to another through NEXTKEY. When this message is issued, it means that a loop has occurred. CA ACF2 for z/VM writes a trace record to the CA ACF2 for z/VM Dataset/Program Event Log (ACFRPTDS). The <key> is the $KEY of the last rule set you referenced during the validation call.

Action

Run the ACFRPTDS report generator specifying TRACE as described in the Report and Utilities Guide. This produces a list of each rule set that was referenced during the validation call. Eliminate the loop by manipulating the appropriate rule sets so you reference each rule set only once. CA ACF2 for z/VM issues additional messages to indicate if the access was granted or denied.