ERROR ZWEAS003E Internal authentication error

Products

• IDMS

Issue/Introduction

The IDMS API Service has been started, but then immediately followed by authentication errors below: 

INFO ZWEAS101I 'IDMS API Service' has been started in 179.821 seconds              
ERROR ZWEAS003E Internal authentication error: An MVS environmental error has been detected. Please contact support for further assistance.
{bf0da019-9633-4eb9-9ae5-0b13c70f9ce2} Security error details: EMVSERR An MVS environmental error has been detected PlatformReturned(success=false, rc=0, errno=157, errno2=151782063, errnoMsg=EDC5157I An internal error has occurred. (errno2=0x090C02AF), stringRet=null, objectRet=null)                          

messageSource : "S0W1.ZOWE:3100:CAIDMS"   messageKey : "org.zowe.commons.zos.security.authentication.error.internal"

0
messageType	"ERROR"
messageNumber	"ZWEAS003"
messageContent	"Internal authentication error: An MVS environmental error has been detected. Please contact support for further assistance."
messageKey	"org.zowe.commons.zos.security.authentication.error.internal"
messageParameters
0	"An MVS environmental error has been detected"
messageInstanceId	"c24210ec-ab82-4cb0-b2e3-a671ac154d10"
messageComponent	"org.zowe.commons.spring.RestAuthenticationEntryPoint"
messageSource	"S0W1.ZOWE:3100:CAIDMS"

 

Environment

Release : 19.0

Component : CA IDMS/DB

Cause

The shared objects (.so) files in the IDMS API /.../lib subdirectory did not have the 'Program Controlled' extended attribute set.

Resolution

The error is because the shared objects (.so) files in the IDMS API /.../lib subdirectory do not have the 'program controlled' extended attribute set. 

 

To determine: 

 

- Go into TSO OMVS, change into the IDMS API /.../lib/ subdirectory and issue the ls -E command: 

 

For example:

cd /.../idmsapi-1.0.0/lib/ 
ls -E

The output shows --s- so the extended attributes is not set. 

-rwxr-x--x  --s-  1 USERID  IDMSDGRP   40960 mmm dd  yyyy libidmsinfo.so       
-rwxr-x--x  --s-  1 USERID  IDMSDGRP  114688 mmm dd  yyyy libzowe-commons-secur.so                                                                             

To set extended attributes, from within the IDMS API /lib subdirectory issue the command:

extattr +p *.so 
ls -E 

Note that now the output shows -ps-, which means the 'program controlled' attribute is set.

# ls -E                                                                         
-rwxr-x--x  -ps-  1 USERID  IDMSDGRP   40960 mmm dd  yyyy libidmsinfo.so       
-rwxr-x--x  -ps-  1 USERID  IDMSDGRP  114688 mmm dd  yyyy libzowe-commons-secur.so                                                                             

 

Additional Information

Configure the CA IDMS REST API

IBM Knowledge Center - SET the program control extended attribute