IBM Support

PH23596: bin/rotatelogs not shipped with program control

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • If BPX.DAEMON is enabled and rotatelogs isn't marked program
    control, this can cause the environment to be dirty and
    password authentication can fail.
    

Local fix

  • Set program control for this file (file system will need to be
    mounted with read/write to do this):
    extattr +ap bin/rotatelogs
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  Users of rotatelogs with IBM HTTP Server    *
    *                  (IHS) on z/OS                               *
    ****************************************************************
    * PROBLEM DESCRIPTION: bin/rotatelogs needs to be PC and APF   *
    *                      authorized                              *
    ****************************************************************
    * RECOMMENDATION:  Apply this fix if using rotatelogs with     *
    *                  IHS                                         *
    ****************************************************************
    If BPX.DAEMON is enabled and rotatelogs isn't marked program
    control, this can cause the environment to be dirty and
    password
    authentication can fail.
    .
    error log shows:
    authnz_saf:crit (157)EDC5157I An internal error has occurred.
    (errno2=0x090C02AF):  IHS00012: SAF user xxxxxx authentication
    failure
    authnz_saf:crit (157)EDC5157I An internal error has occurred.
    (errno2=0x090C02AF): This process is not program controlled.
    .
    MVS system log shows:
    BPXP015I HFS PROGRAM /IHSASERV/bin/rotatelogs IS NOT MARKED
    PROGRAM CONTROLLED.
    BPXP014I ENVIRONMENT MUST BE CONTROLLED FOR DAEMON (BPX.DAEMON)
    PROCESSING.
    .
    ls -lE rotatelogs shows program control is not set:
    -rwxr-xr-x  --s-  IHSU ISHG    421888 Aug 13  2019 rotatelogs
    

Problem conclusion

  • Mark bin/rotatelogs as program controlled so if it is spawned
    it will not mark the parent address space dirty.
    
    This fix is targeted for IBM HTTP Server fix packs:
    - 8.5.5.18
    - 9.0.5.4
    
    For more information, see 'Recommended Updates for WebSphere
    Application Server':
    http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
    

Temporary fix

  • Set program control for this file (file system will need to be
    mounted with read/write to do this):
    extattr +ap bin/rotatelogs
    

Comments

APAR Information

  • APAR number

    PH23596

  • Reported component name

    WAS IHS ZOS

  • Reported component ID

    5655I3510

  • Reported release

    900

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-03-23

  • Closed date

    2020-05-06

  • Last modified date

    2020-05-06

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WAS IHS ZOS

  • Fixed component ID

    5655I3510

Applicable component levels

  • R850 PSY

       UP

  • R90P PSY

       UP

[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.0.0.0"}]

Document Information

Modified date:
09 March 2021