Zowe APIML defaults to IZUDFLT for z/OSMF PassTicket Generation

Products

• Brightside
• Zowe

Issue/Introduction

Users may encounter an HTTP 401 Unauthorized error when using access tokens with z/OSMF through the API Mediation Layer. The logs indicate a PassTicket generation failure with the following error:

org.zowe.apiml.passticket.IRRPassTicketGenerationException: Error on generation of PassTicket: Unable to generate PassTicket... safRc=8, racfRc=16, racfRsn=28

The logs reveal that API ML is attempting to generate a PassTicket using the default z/OSMF application ID IZUDFLT, instead of the z/osmf APPLID configured in zowe.yaml.

Generating PassTicket for user: <user> and ZOSMF applid: IZUDFLT

Environment

Zowe

Resolution

To resolve this, explicitly define the ZWE_zosmf_applId variable within the environment section of your zowe.yaml file.

1. Open your zowe.yaml configuration file.
2. Navigate to the zowe.environments section.
3. Add the following entry, replacing <zOSMF_APPLID> with your actual z/OSMF APPLID:

zowe:
  environments:
    ZWE_zosmf_applId: <zOSMF_APPLID>

4. Restart Zowe to apply the changes.