getGMAP 8/8:4 In Top Secret TSSOERPT

book

Article ID: 191828

calendar_today

Updated On:

Products

CA Top Secret CA Top Secret - LDAP CA Web Administrator for Top Secret

Issue/Introduction

The following USS error shows up in the TSSOERPT:

CA Mainframe Security     - USS EVENTS                          - PAGE    1                                                  
                                                                                
      SERVICE      USERID    GROUP        UID         GID    SAF     RC    RSN  
        DATE          TIME    JOBNAME   SOURCE   SYSID   CPU   SECLABEL

getGMAP            xxxx           ggggg           9010        9003   8      8      4 
05/21/20  20.142   11.37.59 xxxxxx                   xxxxx
Failed - GID not defined or group not defined as OpenMVS group               
 GID value:             9010                                                 
 Map name:                   Search by GID, return groupname

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

The 8/8/4 with getGMAP: The getGMAP is used to map a GID to a GROUP. In this case, the getGMAP is looking for a GID(9010) and not GID(9003). See below.

Failed - GID not defined or group not defined as OpenMVS group
GID value: 9010
Map name: Search by GID, return groupname
According to the above there is no GROUP with a GID(9010).

getGMAPs with a non-zero RC may not necessarily be a problem. A look up was being done by the application and a GROUP with a GID(9010) wasn’t found. It would only be a problem if your application requires a GROUP to be defined with a GID(9010).

Some of these IBM callable service are issued to determine what privileges a user has. These errors might not really be errors.