Hi, I have found that MLIPCOBJ option was stopping the user to open SEMAPHORE, so just made the MLIPCOBJ inactive by issuing : SETROPTS MLIPCOBJ(INACTIVE). Now the user is able to invoke the JVM with no error.
Jags On Wed, Jan 18, 2012 at 12:29 PM, jagadishan perumal <[email protected]>wrote: > Hi, > > Adding to the below when the user is given the SECLABEL with SYSHIGH then > the JVM invocation is successful but providing a SECLABEL of SYSHIGH to a > normal user wont be right choice so I am just trying to understand the > correct level of SECLABEL that needs to be given to the user. IBM manual > Says the ZFS dataset has the capability of adopting the SECLABEL option > when it is active if so how can we know the right SECLABEL of a OMVS ZFS > dataset ? > > Jags > > On Wed, Jan 18, 2012 at 12:24 PM, jagadishan perumal < > [email protected]> wrote: > >> Hi, >> >> In of our Webservice a user is not able to Invoke JVM, below are the >> following error messages : >> >> java version "1.6.0" >> >> Java(TM) SE Runtime Environment (build pmz3160_26sr1-20111114_01(SR1)) >> >> IBM J9 VM (build 2.6, JRE 1.6.0 z/OS s390-31 20111113_94967 (JIT enabled, >> AOT en >> J9VM - R26_Java626_SR1_20111113_1649_B94967 >> >> JIT - r11_20111028_21230 >> >> GC - R26_Java626_SR1_20111113_1649_B94967 >> >> J9CL - 20111113_94967) >> >> JCL - 20111112_01 >> >> JVMSHRC020E An error has occurred while opening semaphore >> >> JVMSHRC336E Port layer error code = -197225 >> >> JVMSHRC337E Platform error message: semget : *EDC5163I SAF/RACF extract >> error*. >> JVMJ9VM015W Initialization error for library j9shr26(11): JVMJ9VM009E >> J9VMDllMai >> Could not create the Java virtual machine >> >> System Information : >> Z/OS : 1.12 >> >> *some of my try :* >> I tried keeping *Xshareclasses:none *but no luck. >> User has the Unique UID and GID assigned. >> User has access to the Java Directory. >> /tmp has the sufficient space >> I even tried Killing the JAVASHARED resource but still no luck. >> There were no ICH messages in the LOG to see if there are any Challenges >> with RACF. >> >> *Historical Details :* >> Recently The system was upgraded to Z/OS 1.12, seclabel option got >> activated but not sure how it happened since the prior RACF database didnt >> had those options enabled. >> >> *BPX setting interms of Parmlib :* >> 1) d omvs,l >> D OMVS,L >> BPXO051I 15.38.38 DISPLAY OMVS 335 >> OMVS 000E ACTIVE OMVS=(00,FS,CI >> SYSTEM WIDE LIMITS: LIMMSG=NONE >> CURRENT HIGHWATER SYSTEM >> USAGE USAGE LIMIT >> MAXPROCSYS 21 34 900 >> MAXUIDS 0 3 200 >> MAXPTYS 0 3 800 >> MAXMMAPAREA 0 0 40960 >> MAXSHAREPAGES 302 2748 131072 >> IPCMSGNIDS 0 0 500 >> IPCSEMNIDS 15 16 500 >> IPCSHMNIDS 5 6 500 >> IPCSHMSPAGES 0 0 262144 >> IPCMSGQBYTES --- 0 2147483647 >> IPCMSGQMNUM --- 0 10000 >> IPCSHMMPAGES --- 4096 25600 >> SHRLIBRGNSIZE 0 32505856 67108864 >> SHRLIBMAXPAGES 0 0 4096 >> >> >> 2) d omvs,o >> >> BPXO043I 15.39.35 DISPLAY OMVS 348 >> OMVS 000E ACTIVE OMVS=(00,FS,CI) >> CURRENT UNIX CONFIGURATION SETTINGS: >> MAXPROCSYS = 900 MAXPROCUSER = 25 >> MAXFILEPROC = 64000 MAXFILESIZE = NOLIMIT >> MAXCPUTIME = 1000 MAXUIDS = 200 >> MAXPTYS = 800 >> MAXMMAPAREA = 40960 MAXASSIZE = 209715200 >> MAXTHREADS = 200 MAXTHREADTASKS = 1000 >> MAXCORESIZE = 4194304 MAXSHAREPAGES = 131072 >> IPCMSGQBYTES = 2147483647 IPCMSGQMNUM = 10000 >> IPCMSGNIDS = 500 IPCSEMNIDS = 500 >> IPCSEMNOPS = 25 IPCSEMNSEMS = 1000 >> IPCSHMMPAGES = 25600 IPCSHMNIDS = 500 >> IPCSHMNSEGS = 500 IPCSHMSPAGES = 262144 >> SUPERUSER = BPXROOT FORKCOPY = COW >> STEPLIBLIST = >> >> >> # java -Xshareclasses:listAllCaches >> JVMSHRC005I No shared class caches available >> >> Could not create the Java virtual machine. >> >> To check if /tmp had enough space : >> >> 1) # ls -ld /tmp >> >> lrwxrwxrwx 1 IBMUSER OMVSGRP 12 May 12 2011 /tmp -> $SYSNAME/tmp >> >> >> # df /tmp/ >> >> Mounted on Filesystem Avail/Total Files Status >> >> /SYSTEM/tmp (/tmp) 204584/204800 25573 >> Available >> >> Some Research : >> Using this error message : JVMSHRC337E Platform error message: semget : " >> *EDC5163I SAF/RACF extract error*." I ended up searching the IBM manual >> " >> >> Language Environment Run-Time Messages " with below explanation >> *EDC5163I SAF/RACF extract error. Explanation: *An authorization failure >> occurred when attempting the service. This message is equivalent to the >> z/OS UNIX System Services errno, EMVSSAFEXTRERR. *Programmer response: *Refer >> to *z/OS XL C/C++ Run-Time Library Reference *for the function being >> attempted for the specific reason for failure. *System action: *The >> request fails. The application continues to run. *Symbolic Feedback >> Code: *EDC51B >> >> Using the above recommendation I ended up searching : Refer to *z/OS XL >> C/C++ Run-Time Library Reference *for the function being attempted for >> the specific reason for failure. Below explanation were : >> EMVSSAFEXTRERR An internal SAF/RACF extract error has occurred. A >> possible reason is that the *username *access has been revoked. errno2 >> contains the BPX1PWD reason code. For more information, see *z/OS UNIX >> System Services Programming: Assembler Callable Services Reference*. >> >> The above stuff says that "A possible reason is that the *username *access >> has been revoked". Does it mean the user access is revoked in OMVS , if so >> how can we activate the username access ? if my understanding is not right >> please direct me in the right direction. >> >> Jags >> > > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
