Invalid Credentials (Revoked) error Web Viewer 14.0

Products

• Output Management Web Viewer

Issue/Introduction

In the Web Viewer logs there is this error:

CAHVS0260E BPX1TLS Authentication Failed:
Return Code: EMVSSAFEXTRERR
Name:        The user's access was revoked.
Description: 0
Reason Code: JROK
Name:        The return code value describes the error.
Description: Refer to the return code for information on the error.

The user ID has omvs segment and has READ access to OMVSAPPL (APPL) resource.

Server ID has access to BPX.SRV.** CLASS(SURROGAT),BPX.DAEMON class(FACILITY),BPX.SERVER class(FACILITY), BPX.SRV class(SURROGAT), BPX.SRV. class(IBMFAC) and many more.

Environment

Release : 14.0

Component : Output Management Web Viewer

Top Secret

Cause

The TSS-I-1C06 error in the security trace indicates the user is not authorized to the facility with ID=60.

Resolution

The exact problem was determined by taking a TSS security trace.

1. Start trace
   TSS ADD(USERID) TRACE
   TSS REFRESH(USERID) JOBNAME(*)
   TSS MODI SECTRACE(ACT,WTL)
   
   
2. Recreate the problem
3. Stop trace
   TSS MODI SECTRACE(OFF)
   TSS REM(USERID) TRACE

The security trace showed a TSS-I-1C06 error which indicates the user is not authorized to the facility with ID=60. The security administrator needed to do the following:

1. TSS MODIFY FACILITY(ALL)
2. Look for the facility with ID=60
3. TSS ADD(IUSERID) FAC(fac) where ‘fac’ is the facility with ID=60.

The facility with ID=60 was WEBXXXX and adding it to the USERID solved the problem.