APAR status
Closed as program error.
Error description
If BPX.DAEMON is enabled and rotatelogs isn't marked program control, this can cause the environment to be dirty and password authentication can fail.
Local fix
Set program control for this file (file system will need to be mounted with read/write to do this): extattr +ap bin/rotatelogs
Problem summary
**************************************************************** * USERS AFFECTED: Users of rotatelogs with IBM HTTP Server * * (IHS) on z/OS * **************************************************************** * PROBLEM DESCRIPTION: bin/rotatelogs needs to be PC and APF * * authorized * **************************************************************** * RECOMMENDATION: Apply this fix if using rotatelogs with * * IHS * **************************************************************** If BPX.DAEMON is enabled and rotatelogs isn't marked program control, this can cause the environment to be dirty and password authentication can fail. . error log shows: authnz_saf:crit (157)EDC5157I An internal error has occurred. (errno2=0x090C02AF): IHS00012: SAF user xxxxxx authentication failure authnz_saf:crit (157)EDC5157I An internal error has occurred. (errno2=0x090C02AF): This process is not program controlled. . MVS system log shows: BPXP015I HFS PROGRAM /IHSASERV/bin/rotatelogs IS NOT MARKED PROGRAM CONTROLLED. BPXP014I ENVIRONMENT MUST BE CONTROLLED FOR DAEMON (BPX.DAEMON) PROCESSING. . ls -lE rotatelogs shows program control is not set: -rwxr-xr-x --s- IHSU ISHG 421888 Aug 13 2019 rotatelogs
Problem conclusion
Mark bin/rotatelogs as program controlled so if it is spawned it will not mark the parent address space dirty. This fix is targeted for IBM HTTP Server fix packs: - 8.5.5.18 - 9.0.5.4 For more information, see 'Recommended Updates for WebSphere Application Server': http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
Temporary fix
Set program control for this file (file system will need to be mounted with read/write to do this): extattr +ap bin/rotatelogs
Comments
APAR Information
APAR number
PH23596
Reported component name
WAS IHS ZOS
Reported component ID
5655I3510
Reported release
900
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2020-03-23
Closed date
2020-05-06
Last modified date
2020-05-06
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
WAS IHS ZOS
Fixed component ID
5655I3510
Applicable component levels
R850 PSY
UP
R90P PSY
UP
[{"Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"9.0.0.0"}]
Document Information
Modified date:
09 March 2021