NFSU84 TRACE NMI AUTHORIZATION ERROR

Document ID : KB000045396
Last Modified Date : 02/11/2018
Show Technical Document Details
Question:

I’m seeing the following error in my SSILOG once every minute. What does it mean and how do I resolve it?

NFSU81 TRACE NMI SUBTASK INIT FOR STACK TCPIP FAILED, RC: R15=00000000 CODE: 8 SUBCODE: 0

NFSU84 TRACE NMI AUTHORIZATION ERROR, EZBRCIFR FUNCTION: OPEN RETVAL: FFFFFFFF RETCODE: 0000006F RSNCODE: 786000DC

Environment:
Netmaster 12.2
Answer:
The presence of NFSU8n messages in the SOLVE SSI log indicates access problems to the SERVAUTH class resources EZB.TRCCTL.** and EZB.TRCSEC.**  resources.
In order for the SOLVE SSI to make use of the IBM real-time application-controlled TCP/IP trace network management interface (Trace NMI), you must define new System Authorization Facility (SAF) profiles in the SERVAUTH class and authorize the user ID assigned to the SOLVE SSI address space to the profiles. 

The user ID assigned to the SOLVE SSI address space must be permitted READ access to the following resources: 
- EZB.TRCCTL.sysname.tcpname.OPEN 
- EZB.TRCCTL.sysname.tcpname.PKTTRACE 
- EZB.TRCSEC.sysname.tcpname.IPSEC 

where: 
- 'sysname' specifies the MVS system name where the SOLVE SSI and TCP/IP stack are running. 
- 'tcpname' specifies the TCP/IP stack name for which packet analysis is enabled. 



 
Additional Information:
If the error condition persists long enough, it can result in excessive ESQA memory consumption with expansion into ECSA.

Fix RO97641 prevents more than 10 occurrences of the error so prevents storage problems but does not correct the underlying problem.

The workaround until security can be corrected is to set PATRACENMI=NO in the SSIPARMS.


Additional Information can be found in the manual -
for 12.1
https://docops.ca.com/ca-netmaster-network-management-for-tcpip/12-1/en/installing/preparing-the-ibm-communications-server/trace-network-management-interface

for 12.2
https://docops.ca.com/ca-netmaster-shared-content-library/12-2/en/install-or-upgrade-ca-netmaster-products/prepare-ibm-communications-server-tcp-ip-and-ftm-only#PrepareIBMCommunicationsServer(TCP/IPandFTMOnly)-TraceNetworkManagementInterface(nwmipOnly)