Start of change

00F3008B

Explanation

FL 505 When processing an authentication token from Db2, RACF® found the token expired.

System action

The connection request is not processed.

System programmer response

Examine the console or SYSLOG output for RACF messages, such as ICH408I, when a connection request is denied.

User response

A RACF-generated authentication token is defined with an expiration time. Your Db2 systems can use the token in connection requests until it expires. Before or after the token expires, obtain a new one prior to any new connection request.

Problem determination

During remote connection processing, Authorization Services invokes the RACROUTE service to validate the authentication token that is received from the Db2 requester. RACF cannot successfully process the token. Db2 issues message DSNL060I but does not write the token-related information to an IFCID 415 exception trace record. In addition to Db2 message DSNL060I, use RACF message ICH408I and the IFCID 415 exception trace to determine the exact cause for the invalid token.

End of change