Getting return code 8 8 4 for RACF Callable Service getUMAP.

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

Description:

Getting return code 8 8 4 for RACF Callable Service getUMAP.

TSSOERPT shows the following entries:

getUMAP          HFCNV22  OMVSGRP            0          20   8    8    4 
06/26/14  14.177   13.52.57 HFCNV22                    TSYS              
Failed - UID not defined or user not defined as OpenMVS user             
UID value:             5016                                             
Map name:                   Search by UID, return userid                
                                                                        
getUMAP          HFCNV22  OMVSGRP            0          20   8    8    4 
06/26/14  14.177   13.53.30 HFCNV22                    TSYS              
Failed - UID not defined or user not defined as OpenMVS user             
UID value:             5016                                             
Map name:                   Search by UID, return userid    

Solution:

The getUMAP is used to determine the userid for a particular UID or determine the UID for a particular userid.

Just because the call fails doesn't really mean there is a security problem. In this case, it just couldn't map a UID to a user or map a user to a UID.

The thing about UID(0) is that it's not unique to just one user. You can have 100 acids with UID(0) which is why the getUMAP failed. Its not going to pass back 100 users when a getUMAP for UID(0) is done. Instead you get the 8 8 4 indicating that it couldn't map a userid to the UID specified.

Environment

Release:
Component: AWAGNT