Error Codes and Messages › ENCS Messages

ENCS Messages

This section lists error messages issued during security checking, along with possible causes and corrective actions to take in error situations.

ENCS001S

XIT PARM HEADER DOES NOT MATCH PROGRAM XIT PARM HEADER pldata- expdata

Reason:

This message indicates that Security processing has terminated, and access to the resource has been denied.

Action:

None.

ENCS002S

XPA PARM HEADER DOES NOT MATCH PROGRAM XPA PARM HEADER pldata-expdata

Reason:

This message indicates that Security processing has terminated and access to the resource has been denied.

Action:

None.

ENCS010I

LOOK ASIDE TABLE ALLOCATED (beginaddr,endaddr):

Reason:

The security look aside table is allocated, beginning at storage address, beginaddr and ending at storage address, endaddr. Processing continues.

Action:

None.

ENCS011W

LOOK ASIDE TABLE PAGE COUNT IS EXCESSIVE (length)

Reason:

The page count for the security lookaside table, specified in the C1DEFLTS, parameter LATSIZE, exceeds the maximum value allowed (524287). The security look aside table is disabled. Security processing continues without the look aside table.

Action:

Recode the LATSIZE parameter specifying a smaller value in the range 0-524287.

ENCS012W

LOOK ASIDE TABLE BYPASSED, SIZE(length), FLAG(code), DFLTADDR(address)

Reason:

The security look aside table (SLAT) is bypassed for one of the following reasons:

• The program invoking ESI indicated not to use the SLAT.
• You specified zero pages for the table.

The length of the table is given, along with the C1DEFLTS table address (dfltaddr). Code identifies the flag within the C1DEFLTS table used by ESI to indicate the use of the look aside table. This message is only issued when ESI is in debugging mode and (ddname EN$DBESI) is allocated.

Action:

This is probably not an error. If you want to use the look aside table, do one of the following:

• If the length is zero, specify a nonzero value on the LATSIZE parameter in the name equates table, and reassemble and link edit the table.
• If the code is 0, it implies that CA Endevor SCM did not use the default tables. You cannot change this.
• If neither of the above is true, contact CA Endevor SCM support for assistance.

ENCS018C

INVALID NAME EQUATES TABLE ADDRESS, (address), ID(tablename)

Reason:

The address of the name equates table does not point to a valid table. Either the address is zero or it does not point to a name equates table. The table name is the value found in the name equates table.

This is an internal error. ESI SMF exception records are not written.

Action:

None.

ENCS030E

INVALID NAME EQUATE LOG OPTION, NUMBER

Reason:

The log option in the name equates table contained a value outside the allowable range. ESI security is bypassed and access is denied.

Action:

Make sure that a valid name equate table is available to CA Endevor SCM. Correct the log parameter and regenerate the name equates table. For more information about the name equates log option, see the SCL Reference Guide.

ENCS031C

UNABLE TO WRITE WARNING MODE SMF RECORDS

Reason:

ESI could not create an ESI SMF exception record. This is possibly due to a storage deficiency. Processing continues and one or more SMF records may be missing.

Action:

Increase the region size and retry the request.

ENCS039C

UNABLE TO LOCATE SIOT ENTRY FOR TRACE DATA SET

Reason:

The CA Endevor SCM External Security Interface could not locate a control block necessary to determine the correct attributes of the trace DD EN$TRESI. This may occur when EN$TRESI is allocated to DUMMY or the DA(*) in TSO/E. ESI may not write records to the trace file when this message is issued.

Action:

Allocate the EN$TRESI DD to a data set or to SYSOUT file. The trace will proceed to be written correctly.

ENCS045C

ERROR OCCURRED WRITING RECORD TO SMF, RC=code

Reason:

An attempt to write an SMF exception record failed with return code rtcd. This message is displayed only when ESI is in warning mode. One or more SMF records are not written and processing continues.

Action:

Action depends upon meaning of return code rtcd.

ENCS046C

SMF RECORD SYNTAX ERROR

Reason:

An error was detected in the format of the SMF exception record generated by ESI. This is an internal error. This message is only displayed when in debugging mode. The SMF record is not written and processing continues.

Action:

None.

ENCSI48S

NAME EQUATE TABLE table name SPECIFIED FOR USE WITH NATIVE SECURITY

Reason:

During initialization, security check processing detected that the security table name table-name is valid for ESI, but the ESI security interface was not specified in the C1DEFLTS table. (Native security is implied in this case.)

Action:

Enable ESI by specifying a correct password for ESSI=keyword of the C1DEFLTS TYPE=MAIN macro, or specify the name of a security table that is configured to be used with Native Security. Next, reassemble and relink the C1DEFLTS table and rerun CA Endevor SCM.

ENCS050C

UNABLE TO PROTECT ESI LOOKASIDE TABLE STORAGE, RC=ndvrrtcd, PGRC=pgrtcd, LAT disabled

Reason:

The PGSER macro request returned a non-zero return code to protect the look aside table (LAT) storage. ndvrrtcd is the internal return code and pgrtcd is the PGSER return code. The security look aside table must be in protected storage. CA Endevor SCM disables the look aside table and processing continues.

Action:

The action depends on the meaning of the pgrtcd return code.

ENCS051C

UNABLE TO UNPROTECT ESI LOOKASIDE TABLE STORAGE, RC=rtcd, PGRC=pgrtcd, LAT disabled

Reason:

An attempt to remove protection from the storage associated with the look aside table failed. rtcd is the internal CA Endevor SCM return code. pgrtcd is the return code from the PGSER protect request. The security look aside table is disabled. Security processing continues without the look aside table.

Action:

Action is dependent upon the meaning associated with pgrtcd.

ENCS101C

C1GSEXTI INIT ERROR IN macro name MACRO,RC=code

Reason:

Unable to append the SMF record to the message.

Action:

Contact your administrator.

ENCS101I

ORMAT=fmtnumber, PASS=passnumber, AUTH=authnumber, ACEE=address, CLASS=class, ENTITY=resource.name, USER ACCESS IS action FROM source RACROUTE RC=rrrtcd, RACHECK RC=rcrtcd, REASON=code

Reason:

This is the ESI trace message and the following fields are traced:

• fmtnumber identifies the entity name format number.
• passnumber identifies the current ESI pass.
• authnumber identifies the SAF authorization code
• address is the address of the ACEE passed to SAF.
• class identifies the entity name resource class
• resource.name is the entity name being verified
• userid identifies the user for whom the record verification was performed
• action is the result of the resource verification, either allowed or denied
• source identifies the source of the verification, either SAF or LAT for the ESI security look aside table
• rrrtcd is the return code from the RACROUTE macro
• rcrtcd is the return code from the RACHECK macro
• code is the verification reason code

Action:

None.

ENCS147S

INVALID NAME EQUATES TABLE LOADED: EXTERNAL(external name) INTERNAL(internal name)

Reason:

The name associated with the name equates table (BC1TNEQU) load module does not match the name specified in the C1DEFLTS table.

Action:

Check the name specified with the ACCSTBL parameter on the C1DEFLTS table to make sure it is correct. Check the name specified within the ESIDFLTS macro on the BC1TNEQU to make sure it is correct. Make sure the tables are loaded from the correct library.

ENCS148S

NAME EQUATES TABLE table name SPECIFIED WITH USE OF NATIVE SECURITY

Reason:

A conflict exists between the ACCSTBL and ESSI parameters within the C1DEFLTS table. The ESSI parameter is set to a value of Y and the ACCSTBL is blank or the ESSI parameter is set to a value of N and the ACCSTBL parameter is not blank.

Action:

Correct the conflict in the C1DEFLTS table.

ENCS301S

module-name NOT LOADED FROM AN AUTHORIZED LIBRARY

Reason:

Some modules and table in the CA Endevor SCM runtime Environment must reside in APF authorized libraries. These include ENUXISTE and C1DEFLTS, and depending on the setting of the AUTHTBLS= operand in the C1DEFLTS TYPE=MAIN macro, may include exit tables security tables (for both Native Security and the External Security Interface). CA Endevor SCM verifies modules which must be loaded from authorized libraries and issues this message if they are not.

ENCS301C is issued if AUTHTBLS=ALLOW was coded in C1DEFLTS. ENCS301S is issued if AUTHTBLS=REQUIRED was coded, and will be followed by a S306 abend.

Action:

Check the allocations for the load libraries for STEPLIB, if one exists, or for the link list allocations defined at your site. The libraries in use must be named in the IEAAPFxx or PROGxx members of SYS1.PARMLIB in order to be authorized. If they are not, ask your Systems programmer to authorize them by adding them to the appropriate SYS1.PARMLIB member. Your System must be IPL’d for the new APF authorizations to take effect.

ENCS302S

CS302S Load Module ',module-name,' was not found in any of the authorized libraries. Reason=reason.

Reason:

This load module was not found in any of the libraries specified in the STEPLIB, LINKLST, or LPA.

Action:

Make sure that the load library containing this module is included in the concatenation. CA Endevor SCM modules are generally located in iprfx.iqual.CSIQAUTH or iprfx.iqual.CSIQLOAD. User-defined tables are generally located in iprfx.iqual.CSIQAUTU.

ENCS303S

ENCS302S Load Module ',module-name,' was not found in [ddname|STEPLIB\LNKLIST]. Reason=reason.

Reason:

This load module was not found. If a ddname appears in the message, then the load module was not found in the any of the libraries associated with that ddname. If STEPLIB/LNKLIST appears in the message, it implies that the load module was not found in any of the libraries specified in the STEPLIB, LINKLST, or LPA.

Action:

Make sure that the load library containing this module is included in the concatenation. CA Endevor SCM modules are generally located in iprfx.iqual.CSIQAUTH or iprfx.iqual.CSIQLOAD. User-defined tables are generally located in iprfx.iqual.CSIQAUTU.

ENCS999I

SLAT ENTRY FOUND FOR resource.name

Reason:

A look aside table entry was found for the entity name called name. This message is only produced when in debugging mode. Processing continues.

Action:

None.