Receiving failures for all tabs in the Netmaster WEBGUI: Encounter exception: Platform security request has failed: module=bcm-apisdk-security, function=0, errno=139.

Products

• NetMaster Network Management for TCP/IP

Issue/Introduction

Users are reporting failures trying to access the Netmaster Web Portal. Login works, but  all tabs are showing the following failure: 
Encounter exception: Platform security request has failed: module=bcm-apisdk-security, function=0, errno=139.  

Additional messages from the NMAPI Server log

|c.b.r.s.s.t.Secur:41                         | Using native library libbcm-apisdk-security.so (build v2.9.1
|c.b.r.s.s.t.ZosJniPlatformSecurityService:96 | Platform security action to create thread-level security environment
without password has failed: EPERM The calling address space is not authorized to use this service or a load from a not
program-controlled library was done in the address space.
JRNoChangeIdentity The invoker is not authorized to change MVS userids; errno =139; errno2=0be803d1    

This is affecting the entire SYSPLEX. It started after RACF security changes were made to tighten down and limit access for users and STCs.

It is only affecting a specific group of users, others still have access to the NM API Server and the Web Portal.

Environment

Netmaster Network Management for TCP/IP - all supported releases

Cause

The error was due to  RACF security changes that removed superuser authority from STC userids.

 

Resolution

SOLUTION:

Without superuser authority,  BPX.DAEMON must have UPDATE access. 

Command to add this for RACF:
PERMIT BPX.DAEMON CLASS(FACILITY) ID(userId) ACCESS(UPDATE)

 

 

WORKAROUND:
This is a plex wide issue. Users can logon to the Netmaster region and utilize the 'green screen' panels to run Smarttrace or do other work.

 

Additional Information

For complete information and examples for RACF, ACF2 and Top Secret, please review these sections of the documentation
For 12.2
Configure Security for the NetMaster API Service Started Task

Configure for User Level USS Authorization

For 13.0
Configure Security for the NetMaster API Service Started Task

Configure Security for the NetMaster Web Portal Started Task

Define UNIX System Service (USS)  Authorization

IBM doc that points to the errno / errno2 codes:
https://www.ibm.com/docs/en/zos/2.4.0?topic=codes-return-errnos
    139    008B    EPERM    The operation is not permitted.

https://www.ibm.com/docs/en/zos/2.4.0?topic=errnojrs-zos-unix-reason-codes
    03D1    JRNoChangeIdentity
    The invoker is not authorized to change MVS userids.

    Action: Daemon authorization is required for this function.

KBs with similar messages 

Netmaster Web Portal Platform security request has failed 

Platform security request has failed: module=bcm-apisdk-security, function=0, errno=139" returned by NetMaster Web Portal