S047 Abends With LDAP And Top Secret

Products

• Top Secret

Issue/Introduction

When trying to create Alias via LDAPSRV in Top Secret, the following error occurs each time.

BPXP018I THREAD 1DE4980000000000, IN PROCESS 16777889, ENDED
 WITHOUT BEING UNDUBBED WITH COMPLETION CODE 80047000
 , AND REASON CODE 00000000.
 IEA995I SYMPTOM DUMP OUTPUT
 SYSTEM COMPLETION CODE=047
  TIME=16.13.40  SEQ=36631  CPU=0000  ASID=012B
  PSW AT TIME OF ERROR  078D1000   887FC136  ILC 2  INTC 6B
    NO ACTIVE MODULE FOUND
    NAME=UNKNOWN
    DATA AT PSW  087FC130 - A718000C  0A6BA738  FFFF5820
    GR 0: 7F578DD0   1: 0000000C
       2: 00F6F700   3: 9D445FB0
       4: 7F578D70   5: 0000004C
       6: 00000000   7: 7F578006
       8: 009C1CF0   9: 7F5791FF
       A: 887FC050   B: 087FD04F
       C: 00046C68   D: 00046C68
       E: 80FD6818   F: 887FC0CE
  END OF SYMPTOM DUMP

Environment

Release : 16.0

Resolution

Issue "ls -lE" in your ldap binary directory (the directory with slapd module in it) and make sure the rmt* modules have the A and P bits specified. The create alias functionality touches the rmt* modules. The rmt* modules need to have the A and P bits specified in order to function in the required authorized state:

-rwxr-xr-x  --s-  2 MVSTCP   OMVSGRP   811008 Sep 27 13:31 rmtauthz

-rwxr-xr-x  --s-  2 MVSTCP   OMVSGRP    98304 Sep 27 13:31 rmtprflt

-rwxr-xr-x  --s-  2 MVSTCP   OMVSGRP    86016 Sep 27 13:31 rmttso

This can be resolved by providing the correct authorization bits to these modules and restarting ldap. You can issue the following 3 extattr commands (in USS in the ldap directory where these modules are located) to set the needed authorizations::

extattr +ap rmtauthz

extattr +ap rmtprflt

extattr +ap rmttso