NFSU84 TRACE NMI AUTHORIZATION ERROR

Document ID : KB000045396
Last Modified Date : 20/02/2019
Show Technical Document Details
Question:

I’m seeing the following error in my SSILOG once every minute. What does it mean and how do I resolve it?

NFSU81 TRACE NMI SUBTASK INIT FOR STACK TCPIP FAILED, RC: R15=00000000 CODE: 8 SUBCODE: 0

NFSU84 TRACE NMI AUTHORIZATION ERROR, EZBRCIFR FUNCTION: OPEN RETVAL: FFFFFFFF RETCODE: 0000006F RSNCODE: 786000DC

Environment:
Netmaster 12.2
Answer:
The presence of NFSU8n messages in the SOLVE SSI log indicates access problems to the SERVAUTH class resources EZB.TRCCTL.** and EZB.TRCSEC.**  resources.
In order for the SOLVE SSI to make use of the IBM real-time application-controlled TCP/IP trace network management interface (Trace NMI), you must define new System Authorization Facility (SAF) profiles in the SERVAUTH class and authorize the user ID assigned to the SOLVE SSI address space to the profiles. 

The user ID assigned to the SOLVE SSI address space must be permitted READ access to the following resources: 
- EZB.TRCCTL.sysname.tcpname.OPEN 
- EZB.TRCCTL.sysname.tcpname.PKTTRACE 
- EZB.TRCSEC.sysname.tcpname.IPSEC 

where: 
- 'sysname' specifies the MVS system name where the SOLVE SSI and TCP/IP stack are running. 
- 'tcpname' specifies the TCP/IP stack name for which packet analysis is enabled. 

If this has already been defined correctly, please check to ensure that the SERV- AUTH class is active.

If not, the command to activate this in  RACF is
SERTOPTS CLASSACT(SERVAUTH).

 
Additional Information:
If the error condition persists long enough, it can result in excessive ESQA memory consumption with expansion into ECSA.

Fix RO97641 prevents more than 10 occurrences of the error so prevents storage problems but does not correct the underlying problem.

WORKAROUND: until security can be corrected, set PATRACENMI=NO in the SSIPARMS.


Additional Information can be found in the Install Guides under Preparing the IBM Communicatons Server -
for 12.1 
https://docops.ca.com/ca-netmaster-network-management-for-tcpip/12-1/en/installing/preparing-the-ibm-communications-server/trace-network-management-interface

for 12.2
https://docops.ca.com/ca-netmaster-shared-content-library/12-2/en/install-or-upgrade-ca-netmaster-products/prepare-ibm-communications-server-tcp-ip-and-ftm-only#PrepareIBMCommunicationsServer(TCP/IPandFTMOnly)-TraceNetworkManagementInterface(nwmipOnly)