After IBM APAR OA58677, NetMaster region abends when a user is suspended

Products

• NetSpy Network Performance
• NetMaster Network Automation
• NetMaster Network Management for SNA
• NetMaster Network Management for TCP/IP
• NetMaster File Transfer Management
• SOLVE

Issue/Introduction

 Applied IBM APAR OA58677: NEW FUNCTION - RACROUTE REQUEST=VERIFY NOW ISSUES ENF71

 

After this, if a NetMaster user exceeds the limit of logon attempts due to wrong RACF passwords provided, the NetMaster region abends (U4095).

 

These are the meaningful messages that can be found on the JESMSGLG:

11.36.52 STC02436  ICH408I USER(uuuuuu ) GROUP(gggggggg) NAME(aaaaaaaa bbbbb      )  645  
   645               LOGON/JOB INITIATION - INVALID PASSWORD ENTERED AT TERMINAL ttttttt
11.37.05 STC02436  ICH408I USER(uuuuuu ) GROUP(gggggggg) NAME(aaaaaaaa bbbbb      )  672  
   672               LOGON/JOB INITIATION - INVALID PASSWORD ENTERED AT TERMINAL ttttttt
11.37.21 STC02436  ICH408I USER(uuuuuu ) GROUP(gggggggg) NAME(aaaaaaaa bbbbb      )  696  
   696               LOGON/JOB INITIATION - INVALID PASSWORD ENTERED AT TERMINAL ttttttt
11.38.15 STC02436  ICH70003I YOU HAVE EXCEEDED THE MAXIMUM NUMBER OF RACF PASSWORD ATTEMPTS.
11.38.15 STC02436  ICH408I USER(uuuuuu ) GROUP(gggggggg) NAME(aaaaaaaa bbbbb      )  793  
   793               LOGON/JOB INITIATION - EXCESSIVE PASSWORD OR PASS PHRASE ATTEMPTS
11.38.15 STC02436  ICH408I USER(netmast ) GROUP(STCUSERS) NAME(STC USER NETMASTER )  794    
   794               IRRIDENF CL(PROGRAM )                                      
   794               INSUFFICIENT ACCESS AUTHORITY                              
   794               FROM IRR* (G)                                              
   794               ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )            
11.38.15 STC02436  CSV025I PROGRAM CONTROLLED MODULE IRRIDENF NOT ACCESSED, USER UNAUTHORIZED
11.38.15 STC02436  CSV028I ABEND306-30  JOBNAME=NETMAS    STEPNAME=NETMASTR    
11.38.15 STC02436 *ICH409I 306-030 ABEND DURING RACINIT PROCESSING              
11.38.15 STC02436  IEA848I NO DUMP WAS PRODUCED FOR THIS ABEND, DUE TO SYSTEM OR INSTALLATION REQUEST
11.38.16 STC02436 *N01101 NetMaster ABEND N-268-01 ID=idid JN=NETMAS DT=2020184 TM=11381567
11.38.16 STC02436 *N01102 SRC=AB PRD=NetMaster INTLVL=070600 SP=1212 ABC=N-268-01
11.38.16 STC02436 *N01103 ALM=NM013 ALO=0000474C ACS=NM000268 ACO=0000016C      
11.38.16 STC02436 *N01104  R0-R3  119149D8 40306000 001A20D4 801A2140          
11.38.16 STC02436 *N01104  R4-R7  40054400 3FFD5AC8 3FBECF20 0007A158          
11.38.16 STC02436 *N01104  R8-R11 0000D1D0 40054400 801A14F4 001A2488          
11.38.16 STC02436 *N01104 R12-R15 00008000 001AF508 801A25CA 00000008           

 

If NetMaster userid is provided with READ access to IRRDENF program, all works fine.

 

Is this the correct behaviour, i.e. should a security violation (NetMaster not authorized to access IRRDENF program) cause the NetMaster region to abend?

Environment

Release : Any

Component : CA NetMaster Network Management for TCP/IP

Resolution

NetMaster/Solve security subtask has abended (in this case for the S306-30); at that point NetMaster is unable to function effectively and so the N-268-01 is purposely issued.