Getting return code 8 8 4 for RACF Callable Service getUMAP.

book

Article ID: 17659

calendar_today

Updated On:

Products

CA Cleanup CA Datacom CA DATACOM - AD CA CIS CA Common Services for z/OS CA 90s Services CA Database Management Solutions for DB2 for z/OS CA Common Product Services Component CA Common Services CA Datacom/AD CA ecoMeter Server Component FOC CA Easytrieve Report Generator for Common Services CA Infocai Maintenance CA IPC Unicenter CA-JCLCheck Common Component CA Mainframe VM Product Manager CA Chorus Software Manager CA On Demand Portal CA Service Desk Manager - Unified Self Service CA PAM Client for Linux for zSeries CA Mainframe Connector for Linux on System z CA Graphical Management Interface CA Web Administrator for Top Secret CA CA- Xpertware CA Top Secret CA Top Secret - LDAP CA Top Secret - VSE

Issue/Introduction

Description:

Getting return code 8 8 4 for RACF Callable Service getUMAP.

TSSOERPT shows the following entries:

getUMAP          HFCNV22  OMVSGRP            0          20   8    8    4 
06/26/14  14.177   13.52.57 HFCNV22                    TSYS              
Failed - UID not defined or user not defined as OpenMVS user             
UID value:             5016                                             
Map name:                   Search by UID, return userid                
                                                                        
getUMAP          HFCNV22  OMVSGRP            0          20   8    8    4 
06/26/14  14.177   13.53.30 HFCNV22                    TSYS              
Failed - UID not defined or user not defined as OpenMVS user             
UID value:             5016                                             
Map name:                   Search by UID, return userid    

Solution:

The getUMAP is used to determine the userid for a particular UID or determine the UID for a particular userid.

Just because the call fails doesn't really mean there is a security problem. In this case, it just couldn't map a UID to a user or map a user to a UID.

The thing about UID(0) is that it's not unique to just one user. You can have 100 acids with UID(0) which is why the getUMAP failed. Its not going to pass back 100 users when a getUMAP for UID(0) is done. Instead you get the 8 8 4 indicating that it couldn't map a userid to the UID specified.

Environment

Release:
Component: AWAGNT