ICH408I for z/OS UNIX System Services based resources

Message

ICH408I USER(JOHN) GROUP(SYSPROG) NAME(JOHN DOE)

Explanation

Upon permission failure, RACF® issues message ICH408I in the system log. RACF shows you what resource was requested on line 2, but with z/OS® UNIX System Services based resources, RACF does not tell you where exactly the permission failure occurred. The failure could be anywhere in the path leading to the requested resource. In the following example, /u/smile is allocated with 700, denying user JOHN access to /u/smile/.eclipse/RSE/SMILE.

ICH408I USER(JOHN) GROUP(SYSPROG) NAME(JOHN DOE)
/u/smile/.eclipse/RSE/SMILE 
CL(DIRSRCH) FID(01D5C9D4E5C8C200020B000000000003)
INSUFFICIENT AUTHORITY TO LSTAT
ACCESS INTENT(—X) ACCESS ALLOWED(GROUP —-)
EFFECTIVE UID(0096061081) EFFECTIVE GID(0999999999)

Use the looppath.sh shell script to list every directory of the path (looppath.sh <path> <cmd>).

$ /usr/lpp/rdz/bin/looppath.sh /u/smile/.eclipse/RSE/SMILE ls -dog
drwxr-xr-x 104 3904 Sep 9 11:41 /
dr-xr-xr-x 25 0 Oct 27 11:19 /u/ 
drwx——— 3 8192 Oct 2 2008 /u/smile/
drwxrwxrwx 3 8192 Jul 1 2008 /u/smile/.eclipse/
drwxrwxrwx 3 8192 Sep 3 2008 /u/smile/.eclipse/RSE/ 
drwxrwxrwx 2 8192 Jan 11 2009 /u/smile/.eclipse/RSE/SMILE/     

Additional information

None.