Hi, Adding to the below when the user is given the SECLABEL with SYSHIGH then the JVM invocation is successful but providing a SECLABEL of SYSHIGH to a normal user wont be right choice so I am just trying to understand the correct level of SECLABEL that needs to be given to the user. IBM manual Says the ZFS dataset has the capability of adopting the SECLABEL option when it is active if so how can we know the right SECLABEL of a OMVS ZFS dataset ?
Jags On Wed, Jan 18, 2012 at 12:24 PM, jagadishan perumal <[email protected]>wrote: > Hi, > > In of our Webservice a user is not able to Invoke JVM, below are the > following error messages : > > java version "1.6.0" > > Java(TM) SE Runtime Environment (build pmz3160_26sr1-20111114_01(SR1)) > > IBM J9 VM (build 2.6, JRE 1.6.0 z/OS s390-31 20111113_94967 (JIT enabled, > AOT en > J9VM - R26_Java626_SR1_20111113_1649_B94967 > > JIT - r11_20111028_21230 > > GC - R26_Java626_SR1_20111113_1649_B94967 > > J9CL - 20111113_94967) > > JCL - 20111112_01 > > JVMSHRC020E An error has occurred while opening semaphore > > JVMSHRC336E Port layer error code = -197225 > > JVMSHRC337E Platform error message: semget : *EDC5163I SAF/RACF extract > error*. > JVMJ9VM015W Initialization error for library j9shr26(11): JVMJ9VM009E > J9VMDllMai > Could not create the Java virtual machine > > System Information : > Z/OS : 1.12 > > *some of my try :* > I tried keeping *Xshareclasses:none *but no luck. > User has the Unique UID and GID assigned. > User has access to the Java Directory. > /tmp has the sufficient space > I even tried Killing the JAVASHARED resource but still no luck. > There were no ICH messages in the LOG to see if there are any Challenges > with RACF. > > *Historical Details :* > Recently The system was upgraded to Z/OS 1.12, seclabel option got > activated but not sure how it happened since the prior RACF database didnt > had those options enabled. > > *BPX setting interms of Parmlib :* > 1) d omvs,l > D OMVS,L > BPXO051I 15.38.38 DISPLAY OMVS 335 > OMVS 000E ACTIVE OMVS=(00,FS,CI > SYSTEM WIDE LIMITS: LIMMSG=NONE > CURRENT HIGHWATER SYSTEM > USAGE USAGE LIMIT > MAXPROCSYS 21 34 900 > MAXUIDS 0 3 200 > MAXPTYS 0 3 800 > MAXMMAPAREA 0 0 40960 > MAXSHAREPAGES 302 2748 131072 > IPCMSGNIDS 0 0 500 > IPCSEMNIDS 15 16 500 > IPCSHMNIDS 5 6 500 > IPCSHMSPAGES 0 0 262144 > IPCMSGQBYTES --- 0 2147483647 > IPCMSGQMNUM --- 0 10000 > IPCSHMMPAGES --- 4096 25600 > SHRLIBRGNSIZE 0 32505856 67108864 > SHRLIBMAXPAGES 0 0 4096 > > > 2) d omvs,o > > BPXO043I 15.39.35 DISPLAY OMVS 348 > OMVS 000E ACTIVE OMVS=(00,FS,CI) > CURRENT UNIX CONFIGURATION SETTINGS: > MAXPROCSYS = 900 MAXPROCUSER = 25 > MAXFILEPROC = 64000 MAXFILESIZE = NOLIMIT > MAXCPUTIME = 1000 MAXUIDS = 200 > MAXPTYS = 800 > MAXMMAPAREA = 40960 MAXASSIZE = 209715200 > MAXTHREADS = 200 MAXTHREADTASKS = 1000 > MAXCORESIZE = 4194304 MAXSHAREPAGES = 131072 > IPCMSGQBYTES = 2147483647 IPCMSGQMNUM = 10000 > IPCMSGNIDS = 500 IPCSEMNIDS = 500 > IPCSEMNOPS = 25 IPCSEMNSEMS = 1000 > IPCSHMMPAGES = 25600 IPCSHMNIDS = 500 > IPCSHMNSEGS = 500 IPCSHMSPAGES = 262144 > SUPERUSER = BPXROOT FORKCOPY = COW > STEPLIBLIST = > > > # java -Xshareclasses:listAllCaches > JVMSHRC005I No shared class caches available > > Could not create the Java virtual machine. > > To check if /tmp had enough space : > > 1) # ls -ld /tmp > > lrwxrwxrwx 1 IBMUSER OMVSGRP 12 May 12 2011 /tmp -> $SYSNAME/tmp > > > # df /tmp/ > > Mounted on Filesystem Avail/Total Files Status > > /SYSTEM/tmp (/tmp) 204584/204800 25573 > Available > > Some Research : > Using this error message : JVMSHRC337E Platform error message: semget : > "*EDC5163I > SAF/RACF extract error*." I ended up searching the IBM manual " > > Language Environment Run-Time Messages " with below explanation > *EDC5163I SAF/RACF extract error. Explanation: *An authorization failure > occurred when attempting the service. This message is equivalent to the > z/OS UNIX System Services errno, EMVSSAFEXTRERR. *Programmer response: *Refer > to *z/OS XL C/C++ Run-Time Library Reference *for the function being > attempted for the specific reason for failure. *System action: *The > request fails. The application continues to run. *Symbolic Feedback Code: > *EDC51B > > Using the above recommendation I ended up searching : Refer to *z/OS XL > C/C++ Run-Time Library Reference *for the function being attempted for > the specific reason for failure. Below explanation were : > EMVSSAFEXTRERR An internal SAF/RACF extract error has occurred. A possible > reason is that the *username *access has been revoked. errno2 contains > the BPX1PWD reason code. For more information, see *z/OS UNIX System > Services Programming: Assembler Callable Services Reference*. > > The above stuff says that "A possible reason is that the *username *access > has been revoked". Does it mean the user access is revoked in OMVS , if so > how can we activate the username access ? if my understanding is not right > please direct me in the right direction. > > Jags > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
