Security manager messages (CSQH...)

CSQH003I

Security refresh did not take place for class class-name

Explanation:

This message follows message CSQH004I when an attempt to refresh class MQPROC, MQNLIST, or MQQUEUE was unsuccessful because of a return code from a SAF RACROUTE REQUEST=STAT call. The return code is given in message CSQH004I.

Severity:

System Action:

The refresh does not occur.

System Programmer Response:

Check that the class in question (class-name) is set up correctly. See message CSQH004I for the reason for the problem.

CSQH004I

csect-name STAT call failed for class class-name, SAF return code=saf-rc, ESM return code=esm-rc

Explanation:

This message is issued as a result of a SAF RACROUTE REQUEST=STAT call to your external security manager (ESM) returning a non-zero return code at one of the following times:

During initialization, or in response to a REFRESH SECURITY command
If the return codes from SAF and your ESM are not zero, and are unexpected, this will cause abnormal termination with one of the following reason codes:
- X'00C8000D'
- X'00C80032'
- X'00C80038'
In response to a REFRESH SECURITY command.
If the return codes from SAF and your ESM are not zero (for example, because a class is not active because you are not going to use it) this message is returned to the issuer of the command to advise that the STAT call failed.

Possible causes of this problem are:

The class is not installed
The class is not active
The external security manager (ESM) is not active
The RACF z/OS router table is incorrect

Severity:

System Programmer Response:

To determine if we need to take any action, see the Security Server External Security Interface (RACROUTE) Macro Reference for more information about the return codes.

CSQH005I

csect-name resource-type In-storage profiles successfully listed

Explanation:

This message is issued in response to a REFRESH SECURITY command that caused the in-storage profiles to be RACLISTED (that is, rebuilt); for example, when the security switch for a resource is set on, or a refresh for a specific class is requested that requires the in-storage tables to be rebuilt.

Severity:

System Programmer Response:

This message is issued so that we can check the security configuration of your queue manager.

CSQH006I

Error returned from CSQTTIME, security timer not started

Explanation:

An error was returned from the MQ timer component, so the security timer was not started.

Severity:

System Action:

The queue manager terminates abnormally, with a reason code of X'00C80042'.

System Programmer Response:

Refer to Security manager codes (X'C8') for an explanation of the reason code.

CSQH007I

Reverify flag not set for userid user-id, no entry found

Explanation:

A user identifier (user-id) specified in the RVERIFY SECURITY command was not valid because there was no entry found for it in the internal control table. This could be because the identifier was entered incorrectly in the command, or because it was not in the table (for example, because it had timed-out).

Severity:

System Action:

The user identifier (user-id) is not flagged for reverify.

System Programmer Response:

Check that the identifier was entered correctly.

CSQH008I

Subsystem security not active, no userids processed

Explanation:

The RVERIFY SECURITY command was issued, but the subsystem security switch is off, so there are no internal control tables to flag for reverification.

Severity:

CSQH009I

Errors occurred during security timeout processing

Explanation:

This message is sent to the system log either:

If an error occurs during security timeout processing (for example, a nonzero return code from the external security manager (ESM) during delete processing)
Prior to a message CSQH010I if a nonzero return code is received from the timer (CSQTTIME) during an attempt to restart the security timer

Severity:

System Action:

Processing continues.

System Programmer Response:

Contact your IBM support center to report the problem.

CSQH010I

csect-name Security timeout timer not restarted

Explanation:

This message is issued to inform you that the security timeout timer is not operational. The reason for this depends on which of the following messages precedes this one:

CSQH009I: An error occurred during timeout processing
CSQH011I: The timeout interval has been set to zero

Severity:

System Action:

If this message follows message CSQH009I, the queue manager ends abnormally with one of the following reason codes:

csect-name: Reason code
CSQHTPOP: X'00C80040'
CSQHPATC: X'00C80041'

System Programmer Response:

Refer to Security manager codes (X'C8') for information about the reason code.

CSQH011I

csect-name Security interval is now set to zero

Explanation:

The ALTER SECURITY command was entered with the INTERVAL attribute set to 0. This means that no user timeouts will occur.

Severity:

System Programmer Response:

This message is issued to warn you that no security timeouts will occur. Check that this is what was intended.

CSQH012I

Errors occurred during ALTER SECURITY timeout processing

Explanation:

This message is issued in response to an ALTER SECURITY command if errors have been detected during timeout processing (for example, a nonzero return code from the external security manager (ESM) during timeout processing).

Severity:

System Action:

Processing continues.

System Programmer Response:

Contact your IBM support center to report the problem.

CSQH015I

Security timeout = number minutes

Explanation:

This message is issued in response to the DISPLAY SECURITY TIMEOUT command, or as part of the DISPLAY SECURITY ALL command.

Severity:

CSQH016I

Security interval = number minutes

Explanation:

This message is issued in response to the DISPLAY SECURITY INTERVAL command, or as part of the DISPLAY SECURITY ALL command.

Severity:

CSQH017I

Security refresh completed with errors in signoff

Explanation:

This message is issued when an error has been detected in refresh processing; for example, a nonzero return code from the external security manager (ESM) during signoff or delete processing.

Severity:

System Action:

Processing continues.

System Programmer Response:

Contact your IBM support center to report the problem.

CSQH018I

csect-name Security refresh for resource-type not processed, security switch set OFF

Explanation:

A REFRESH SECURITY command was issued for resource type resource-type. However, the security switch for this type or the subsystem security switch is currently set off.

Note:

This message is issued only for resource types MQQUEUE, MQPROC, and MQNLIST, because MQADMIN is always available for refresh.

Severity:

System Programmer Response:

Ensure that the REFRESH SECURITY request was issued for the correct resource type.

CSQH019I

Keyword values are incompatible

Explanation:

The REFRESH SECURITY command was issued, but the command syntax is incorrect because a keyword value that is specified conflicts with the value for another keyword.

Severity:

System Action:

The command is not executed.

System Programmer Response:

See the WebSphere MQ Script (MQSC) Command Reference manual for more information about the REFRESH SECURITY command.

CSQH021I

csect-name switch-type security switch set OFF, profile 'profile-type' found

Explanation:

This message is issued during queue manager initialization and in response to a REFRESH SECURITY command for each security switch that is set OFF because the named security profile has been found.

Severity:

System Action:

If the subsystem security switch is set off, you will get only one message (for that switch).

System Programmer Response:

Messages CSQH021I through CSQH026I are issued so that we can check the security configuration of your queue manager. See the WebSphere MQ for z/OS System Setup Guide for information about setting security switches.

CSQH022I

csect-name switch-type security switch set ON, profile 'profile-type' found

Explanation:

This message is issued during queue manager initialization and in response to a REFRESH SECURITY command for each security switch that is set ON because the named security profile has been found.

Severity:

System Programmer Response:

CSQH023I

csect-name switch-type security switch set OFF, profile 'profile-type' not found

Explanation:

This message is issued during queue manager initialization and in response to a REFRESH SECURITY command for each security switch that is set OFF because the named security profile has not been found.

Severity:

System Action:

If the subsystem security switch is set off, you will get only one message (for that switch).

System Programmer Response:

CSQH024I

csect-name switch-type security switch set ON, profile 'profile-type' not found

Explanation:

This message is issued during queue manager initialization and in response to a REFRESH SECURITY command for each security switch that is set ON because the named security profile has not been found.

Severity:

System Programmer Response:

CSQH025I

csect-name switch-type security switch set OFF, internal error

Explanation:

This message is issued during queue manager initialization and in response to a REFRESH SECURITY command for each security switch that is set OFF because an error occurred.

Severity:

System Action:

The message may be issued in conjunction with message CSQH004I when an unexpected setting is encountered for a switch.

System Programmer Response:

See message CSQH004I for more information.

Messages CSQH021I through CSQH026I are issued so that we can check the security configuration of your queue manager.

CSQH026I

csect-name switch-type security switch forced ON, profile 'profile-type' overridden

Explanation:

This message is issued during queue manager initialization and in response to a REFRESH SECURITY command for each security switch that was forced ON. This happens when an attempt was made to turn off both the queue manager and queue-sharing group security switches for the named profile, which is not allowed.

Severity:

System Programmer Response:

Correct the profiles for the queue manager and queue-sharing group security switches, and refresh security if required.

CSQH030I

Security switches ...

Explanation:

This is issued in response to a DISPLAY SECURITY ALL or DISPLAY SECURITY SWITCHES command and is followed by messages CSQH031I through CSQH036I for each security switch to show its setting and the security profile used to establish it.

Severity:

System Action:

If the subsystem security switch is set off, you will get only one message (for that switch). Otherwise, a message is issued for each security switch.

CSQH031I

switch-type OFF, 'profile-type' found

Explanation:

This message is issued in response to a DISPLAY SECURITY ALL or DISPLAY SECURITY SWITCHES command for each security switch that is set OFF because the named security profile has been found.

Severity:

System Action:

If the subsystem security switch is set off, you will get only one message (for that switch).

CSQH032I

switch-type ON, 'profile-type' found

Explanation:

This message is issued in response to a DISPLAY SECURITY ALL or DISPLAY SECURITY SWITCHES command for each security switch that is set ON because the named security profile has been found.

Severity:

CSQH033I

switch-type OFF, 'profile-type' not found

Explanation:

This message is issued in response to a DISPLAY SECURITY ALL or DISPLAY SECURITY SWITCHES command for each security switch that is set OFF because the named security profile has not been found.

Severity:

System Action:

If the subsystem security switch is set off, you will get only one message (for that switch).

CSQH034I

switch-type ON, 'profile-type' not found

Explanation:

This message is issued in response to a DISPLAY SECURITY ALL or DISPLAY SECURITY SWITCHES command for each security switch that is set ON because the named security profile has not been found.

Severity:

CSQH035I

switch-type OFF, internal error

Explanation:

This message is issued in response to a DISPLAY SECURITY ALL or DISPLAY SECURITY SWITCHES command for each security switch that is set OFF because an error occurred during initialization or when refreshing security.

Severity:

System Action:

The message may be issued when an unexpected setting is encountered for a switch.

System Programmer Response:

Check all your security switch settings. If required, correct them and refresh your security.

CSQH036I

switch-type ON, 'profile-type' overridden

Explanation:

This message is issued in response to a DISPLAY SECURITY ALL or DISPLAY SECURITY SWITCHES command for each security switch that was forced ON. This happens when an attempt was made to turn off both the queue manager and queue-sharing group security switches for the named profile, which is not allowed.

Severity:

System Programmer Response:

Correct the profiles for the queue manager and queue-sharing group security switches, and refresh security if required.