CICS application cannot connect to the server

If the CICS® application cannot connect to zRule Execution Server for z/OS, verify that the permissions are set correctly.

Symptoms

The CICS application cannot connect to zRule Execution Server for z/OS®.

Environment

The user ID that CICS runs under must have read and write permissions to the directories specified by the ++HBRWORKPATH++ variable, and to the directory specified by the JVMPROFILEDIR parameter in the CICS system initialization parameters.

Resolving the problem

To set these permissions, you must take the following steps:
  1. Add to an access control group the CICS user ID under which the JVM server runs and any other user ID that requires access to the directories.
  2. Give the access control group read and write permissions to the files and directories in the work paths and to the directory specified by JVMPROFILEDIR.
  3. Ensure that the access control group has permission to read your JVM profile file (HBRJVM). If CICS lacks permission to access the files, the CICS JVM configuration scripts fail or CICS is denied authorization to the directories. In the HBRPRINT log for the CICS region, the following message displays:
    Attempt to open JVM profile HBRJVM has failed. Runtime error message = EDC5111I Permission denied. 
    In addition, a message is written to the syslog, for example:
     ICH408I USER(SYSMQ ) GROUP(STGRP ) NAME(MVS TASK ) 190
    /u/aflatt/WORKPATHS/HBRM/res_data/MiniLoanDemoRuleApp
    CL(DIRSRCH ) FID(000007D50000077D0000000000000000)
    INSUFFICIENT AUTHORITY TO OPENDIR
    ACCESS INTENT(--X) ACCESS ALLOWED(OTHER ---)
    EFFECTIVE UID(0000999999) EFFECTIVE GID(0000000000)