Two scenarios are described here. Choose the appropriate
one.
- Scenario 1: The following diagnostic message is
written to the SDSF SYSLOG on z/OS when
your broker fails to start:
ICH408I USER(MA10USR ) GROUP(TSOUSER ) NAME(OTHER, A N (ANO) 484
/argo/MA10BRK/ENVFILE
- --TIMINGS (MINS.)--
----PAGING COUNTS---
-JOBNAME STEPNAME PROCSTEP RC EXCP CPU SRB CLOCK SERV PG
PAGE SWAP VIO SWAPS
CL(DIRSRCH ) FID(01D7D3E2E3F1F9002D08000000000003)
INSUFFICIENT AUTHORITY TO LOOKUP
ACCESS INTENT(--X) ACCESS ALLOWED(OTHER ---)
- Explanation: The started task ID, under which the
broker runs, must be in a RACF® or z/OS UNIX System
Services (USS) group that has rwx permissions on the broker directory.
For example, consider a broker that is created under directory /argo/MA00BRK.
It runs under started task ID MA00USR. Issuing the ls -al command
from the root directory / to find the permission
bit settings on /argo returns:
drwxrwx--- 5 BPXROOT ARGOUSR 8192 Jul 30 13:57 argo
If
you issue the
id MA00USR command to find the group
membership of started task ID MA00USR you see:
uid=14938(MA00USR) gid=5(TSOUSER) groups=229(ARGOUSR)
These
results show that the started task ID MA00USR potentially has rwx
permissions on subdirectories to
/argo, because
these permissions are set for both the user and the group that is
associated with MA00USR. If the permissions are not set correctly,
you see the type of diagnostic message shown in the scenario.
- Solution: Make sure that the started task ID, under
which the broker runs, is in a RACF or
USS group that has rwx permissions on the broker directory.
- Scenario 2: The following diagnostic message is
written to the SDSF SYSLOG on z/OS when
your broker fails to start:
ICH408I USER(MA10USR ) GROUP(WMQIBRKS ) NAME(MA10USR
CSFRNG CL(CSFSERV )
INSUFFICIENT ACCESS AUTHORITY
FROM ** (G)
ACCESS INTENT(READ ) ACCESS ALLOWED(NONE )
- Explanation: During the broker start up process, Java accesses a secure random number
generator. Consequently, the broker started task ID needs access to
the CSFRNG resource in the CSFSERV class.
- Solution: Make sure that the started task ID that
the broker runs under has access to the CSFRNG resource in the CSFSERV
class.