JOBF in and out of z/OS USS fails: EDC5139I Operation not permitted
Article ID: 87737
Updated On:
Products
CA Automic Workload Automation - Automation Engine
Issue/Introduction
Error Message :
U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
File transfers (FT) between Unix System Services & Hierarchical File Systems z/OS fail.
Transfer from UNIX to z/OS USS:
Agent log:
Transfer from z/OS USS to UNIX:
The Transfer from/to USS file system does not work properly when switching between FT and Agent users.
Function call seteuid()/setegid() may fail. Sequence of effective user switch may be wrong, it appears that the Agent does not have the proper authority.
Note: Needed permissions for agent user:
U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
File transfers (FT) between Unix System Services & Hierarchical File Systems z/OS fail.
Transfer from UNIX to z/OS USS:
2015-10-16 17:50:29 - U0011124 Selection started with filter '/home/s46jz8/testfile1.txt' ...
2015-10-16 17:50:29 - U0011125 '/home/s46jz8/testfile1.txt'
2015-10-16 17:50:29 - U0011126 Files selected: '1'.
2015-10-16 17:50:29 - U0011134 ERROR '0' bytes, incorrect transfer of '1' records for file '/home/s46jz8/testfile1.txt'->'/home/s46jz8/testfile1.txt'. Duration '00:00:00'.
2015-10-16 17:50:29 - U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
2015-10-16 17:50:29 - U0011409 FT '29893381': FileTransfer ended abnormally.
2015-10-16 17:50:29 - U0011125 '/home/s46jz8/testfile1.txt'
2015-10-16 17:50:29 - U0011126 Files selected: '1'.
2015-10-16 17:50:29 - U0011134 ERROR '0' bytes, incorrect transfer of '1' records for file '/home/s46jz8/testfile1.txt'->'/home/s46jz8/testfile1.txt'. Duration '00:00:00'.
2015-10-16 17:50:29 - U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
2015-10-16 17:50:29 - U0011409 FT '29893381': FileTransfer ended abnormally.
Agent log:
20151016/175028.979 - U2002039 Successfully established connection with '10.51.20.193:57302' (socket handle = '10').
20151016/175028.979 - U2000006 Connection to Agent 'CHRVL360(10,ID=816)' was successfully established.
20151016/175029.006 - U2000134 Thread '*FT(29893381)' started.
20151016/175029.008 - U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
20151016/175039.000 - U2000135 Thread '*FT(29893381)' ended.
20151016/175039.000 - U2000007 Connection to Agent 'CHRVL360(10,ID=816)' terminated.
20151016/175028.979 - U2000006 Connection to Agent 'CHRVL360(10,ID=816)' was successfully established.
20151016/175029.006 - U2000134 Thread '*FT(29893381)' started.
20151016/175029.008 - U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
20151016/175039.000 - U2000135 Thread '*FT(29893381)' ended.
20151016/175039.000 - U2000007 Connection to Agent 'CHRVL360(10,ID=816)' terminated.
Transfer from z/OS USS to UNIX:
2015-10-16 18:10:02 - U2000102 Error when calling the function 'opendir', error code '111(EDC5111I Permission denied.)'.
Agent log:20151016/181002.309 - U2000013 Connection to Agent 'CHRVL360' initiated.
20151016/181002.310 - U2000006 Connection to Agent 'CHRVL360(10,ID=818)' was successfully established.
20151016/181002.311 - U2000134 Thread '*FT(29898208)' started.
20151016/181002.312 - U0011124 Selection started with filter '/home/s46jz8/testfile1.txt' ...
20151016/181002.323 - U2000102 Error when calling the function 'opendir', error code '111(EDC5111I Permission denied.)'.
20151016/181002.323 - U2000135 Thread '*FT(29898208)' ended.
20151016/181002.323 - U2000007 Connection to Agent 'CHRVL360(10,ID=818)' terminated.
20151016/181002.310 - U2000006 Connection to Agent 'CHRVL360(10,ID=818)' was successfully established.
20151016/181002.311 - U2000134 Thread '*FT(29898208)' started.
20151016/181002.312 - U0011124 Selection started with filter '/home/s46jz8/testfile1.txt' ...
20151016/181002.323 - U2000102 Error when calling the function 'opendir', error code '111(EDC5111I Permission denied.)'.
20151016/181002.323 - U2000135 Thread '*FT(29898208)' ended.
20151016/181002.323 - U2000007 Connection to Agent 'CHRVL360(10,ID=818)' terminated.
The Transfer from/to USS file system does not work properly when switching between FT and Agent users.
Function call seteuid()/setegid() may fail. Sequence of effective user switch may be wrong, it appears that the Agent does not have the proper authority.
Note: Needed permissions for agent user:
FACILITY class, BPX.SERVER profile with READ access
FACILITY class, BPX.DAEMON profile with READ access
FACILITY class, BPX.SUPERUSER profile with READ access
UserID of Agent user must not be zero! With BPX.SUPERUSER it should be able to change effective UserID.
FACILITY class, BPX.DAEMON profile with READ access
FACILITY class, BPX.SUPERUSER profile with READ access
UserID of Agent user must not be zero! With BPX.SUPERUSER it should be able to change effective UserID.
Environment
OS: Z/OS
Cause
Cause type:
Defect
Root Cause: Transfer from/to USS filesystem fails in certain cases, when switching between FT and agent user. Function call seteuid()/setegid() may fail. Sequence of effective user switch may be wrong, looks that agent doesn't have enough authority.
Defect
Root Cause: Transfer from/to USS filesystem fails in certain cases, when switching between FT and agent user. Function call seteuid()/setegid() may fail. Sequence of effective user switch may be wrong, looks that agent doesn't have enough authority.
Resolution
This field was added on 30/03/2017. This article has not been updated yet. Refer to the "Description" or "Workaround" sections for solution information.
Fix Status: Released
Fix Version(s):
Component(s): Agent MVS
Automation Engine 11.2.2 - Available
Automation Engine 11.1.4 - Available
Automation Engine 10.0.8 - Available
Fix Status: Released
Fix Version(s):
Component(s): Agent MVS
Automation Engine 11.2.2 - Available
Automation Engine 11.1.4 - Available
Automation Engine 10.0.8 - Available
Additional Information
Workaround :
From version 11.x: Use thread level security feature, which can be activated with an INI file setting:(GLOBAL)ft_thread_level_security=yes
From version 11.x: Use thread level security feature, which can be activated with an INI file setting:(GLOBAL)ft_thread_level_security=yes
Feedback
Yes
No
Powered by
