z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1226I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1226I
MLSCHK iptype ipaddr HAS INCORRECT SECLABEL zonesl ZONE zonename zoneentry RESNM resourcename PRFNM profilename

Explanation

In a multilevel secure environment, ipaddr must be configured into a NETACCESS security zone with a security label the same as the TCPIP job. See message EZD1215I for the security label of the TCPIP job.

iptype is one of INADDR_ANY, IN6ADDR_ANY or TCPSTACKSOURCEVIPA.

ipaddr is the associated IP address.

zonesl is the security label defined in the SECLABEL field in this SERVAUTH profile. If the SECLABEL field is blank, zonesl will be <NONE>.

zonename is the security zone name defined in the NETACCESS zone entry for this IP address.

zoneentry is the NETACCESS zone entry for this IP address. zoneentry is either:
  • DEFAULT
  • DEFAULTHOME
  • ipaddress/masklength.

resourcename is the name of the SERVAUTH resource.

profilename is the name of the SERVAUTH profile that covers this resource name.

System action

TCPIP continues.

Operator response

Contact the system programmer.

System programmer response

If the iptype is TCPSTACKSOURCEVIPA, verify that this IP address is intended to be used by this TCPIP job. Verify that:
  • The NETACCESS statement maps the IP address into the correct security zone.
  • The resource name is covered by the intended profile in the SERVAUTH class.
  • The profile has the correct security label defined.
  • The security label is defined and active on this system.

See z/OS Communications Server: IP Diagnosis Guide for more information about diagnosing TCPIP access control problems.

Module

EZBTIMDF

Procedure name

MLSCheck

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014