JOBF in and out of z/OS USS fails: EDC5139I Operation not permitted

book

Article ID: 87737

calendar_today

Updated On:

Products

CA Automic Workload Automation - Automation Engine AUTOMIC WORKLOAD AUTOMATION

Issue/Introduction

Error Message :
U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.

File transfers (FT) between Unix System Services & Hierarchical File Systems z/OS fail.

Transfer from UNIX to z/OS USS:
2015-10-16 17:50:29 - U0011124 Selection started with filter '/home/s46jz8/testfile1.txt' ...
2015-10-16 17:50:29 - U0011125 '/home/s46jz8/testfile1.txt'
2015-10-16 17:50:29 - U0011126 Files selected: '1'.
2015-10-16 17:50:29 - U0011134 ERROR '0' bytes, incorrect transfer of '1' records for file '/home/s46jz8/testfile1.txt'->'/home/s46jz8/testfile1.txt'. Duration '00:00:00'.
2015-10-16 17:50:29 - U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
2015-10-16 17:50:29 - U0011409 FT '29893381': FileTransfer ended abnormally.

Agent log:
20151016/175028.979 - U2002039 Successfully established connection with '10.51.20.193:57302' (socket handle = '10').
20151016/175028.979 - U2000006 Connection to Agent 'CHRVL360(10,ID=816)' was successfully established.
20151016/175029.006 - U2000134 Thread '*FT(29893381)' started.
20151016/175029.008 - U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
20151016/175039.000 - U2000135 Thread '*FT(29893381)' ended.
20151016/175039.000 - U2000007 Connection to Agent 'CHRVL360(10,ID=816)' terminated.


Transfer from z/OS USS to UNIX:
2015-10-16 18:10:02 - U2000102 Error when calling the function 'opendir', error code '111(EDC5111I Permission denied.)'.
 
Agent log:
20151016/181002.309 - U2000013 Connection to Agent 'CHRVL360' initiated.
20151016/181002.310 - U2000006 Connection to Agent 'CHRVL360(10,ID=818)' was successfully established.
20151016/181002.311 - U2000134 Thread '*FT(29898208)' started.
20151016/181002.312 - U0011124 Selection started with filter '/home/s46jz8/testfile1.txt' ...
20151016/181002.323 - U2000102 Error when calling the function 'opendir', error code '111(EDC5111I Permission denied.)'.
20151016/181002.323 - U2000135 Thread '*FT(29898208)' ended.
20151016/181002.323 - U2000007 Connection to Agent 'CHRVL360(10,ID=818)' terminated.

The Transfer from/to USS file system does not work properly when switching between FT and Agent users.
Function call seteuid()/setegid() may fail. Sequence of effective user switch may be wrong, it appears that the Agent does not have the proper authority.

Note: Needed permissions for agent user:
FACILITY class, BPX.SERVER profile with READ access
FACILITY class, BPX.DAEMON profile with READ access
FACILITY class, BPX.SUPERUSER profile with READ access
UserID of Agent user must not be zero! With BPX.SUPERUSER it should be able to change effective UserID.

 

Cause

Cause type:
Defect
Root Cause: Transfer from/to USS filesystem fails in certain cases, when switching between FT and agent user. Function call seteuid()/setegid() may fail. Sequence of effective user switch may be wrong, looks that agent doesn't have enough authority.

Environment

OS: Z/OS

Resolution

This field was added on 30/03/2017. This article has not been updated yet. Refer to the "Description" or "Workaround" sections for solution information.

Fix Status: Released

Fix Version(s):
Component(s): Agent MVS

Automation Engine 11.2.2 - Available
Automation Engine 11.1.4 - Available
Automation Engine 10.0.8 - Available

Additional Information

Workaround :
From version 11.x: Use thread level security feature, which can be activated with an INI file setting:(GLOBAL)ft_thread_level_security=yes