PH70473: NULLPOINTEREXCEPTION AND HTTP 500 ERRORS IN RSEAPI WHILE CONCURRENT USER LOGOUT/LOGIN IS IN PROGRESS

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• In RSEAPI v1.2.4, NullPointException error (in catalina.*log)
  and HTTP
  500 (in localhost_access_log*) are observed when concurrent log
  out/log in for the same user is in progress from different
  client machines. Here is an example of the NPE seen in the
  catalina log file:
  
  java.lang.NullPointerException: Cannot invoke
  "com.ibm.etools.zos.server.ZosClient.getLockThreadTCB()" because
  
  the return value of
  "com.ibm.rse.rest.adapters.dstore.DStoreClient.getClient()" is
  null
  at com.ibm.rse.rest.adapters.dstore.DStoreManager$UserIdDStore
  Map.removeUser(DStoreManager.java:815)
  at com.ibm.rse.rest.adapters.dstore.DStoreManager.removeDStore
  Client(DStoreManager.java:236)
  at com.ibm.rse.rest.adapters.dstore.DStoreRESTExtension.shutdo
  wn(DStoreRESTExtension.java:76)
  at com.ibm.rse.rest.adapters.AdapterManager.shutdown(AdapterMa
  nager.java:221)
  at com.ibm.rse.rest.adapters.dstore.RACFAuthenticationService.
  logoutToken(RACFAuthenticationService.java:358)
  
  ZOS0302T/K
  SEMERU25T/K
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: 1. RSEAPI Users                              *
  *                 2. All datasets query users                  *
  *                 3. RSEAPI Users                              *
  *                 4. RSEAPI Users                              *
  *                 5. RSEAPI Users                              *
  *                 6. All mvs users                             *
  *                 7. RSEAPI Users                              *
  *                 8. RSEAPI Users                              *
  *                 9. All Users                                 *
  *                 10. Users with old clients                   *
  ****************************************************************
  * PROBLEM DESCRIPTION: 1. NULLPOINTEREXCEPTION AND HTTP 500    *
  *                      ERRORS IN RSEAPI WHILE CONCURRENT       *
  *                      USER LOGOUT/LOGIN IS IN PROGRESS        *
  *                      2. Volser option is useful in           *
  *                      dataset query, such as for              *
  *                      uncataloged datasets. RSE currently     *
  *                      does not support the volser option.     *
  *                      3. New requirement to support mvs       *
  *                      tools with RSEAPI MCP native server     *
  *                      4. Single sign-on support requires      *
  *                      RSEAPI server to allow JWT logon        *
  *                      without enforcing prior periodic        *
  *                      logon using credential                  *
  *                      5. Customer RFE requested to support    *
  *                      update a dataset in appending mode.     *
  *                      6. Caller of RSEAPI host mvs adapter    *
  *                      needs the badhex information to         *
  *                      properly decide to enable or disable    *
  *                      the edit mode of the download data      *
  *                      set content. Use case: IDz on VSCode    *
  *                      7. RSE API  /admin/diagnostics cannot   *
  *                      retrieve other users' log files and     *
  *                      assign the ownership of the generated   *
  *                      diagnostics archive to the              *
  *                      API calling user.                       *
  *                      8. Customer RFE requested to be able    *
  *                      to list dataset (PDS) without its       *
  *                      reference date updated.                 *
  *                      9. To implement the support of X. 509   *
  *                      certificate in client authentication    *
  *                      for RSE API server.                     *
  *                      10. Current RSED 3.4.x does not         *
  *                      reject old clients per version check    *
  *                      as advertized:MINIMUM_CLIENT_VERSIONS   *
  *                      Note: Clients before z/OS Explorer      *
  *                      service level 3.4.2                     *
  *                      (IDz/IDzEE 17.0.2) do not provide       *
  *                      their service level and will be         *
  *                      treated as not meeting the required     *
  *                      level.                                  *
  ****************************************************************
  1. When logout and login occur concurrently for the same user
  ID, an HTTP 500 error is returned and a NullPointerException
  is thrown
  2. The support of volser in datasets query spreads largely to
  most of the operations, each could require different areas of
  changes. This task is to address the dataset name listing query.
  3. Basic mvs operations support has been added to the RSEAPI
  MCP native tool
  4. Single sign-on support requires RSEAPI server to allow JWT
  logon without enforcing prior periodic logon using credential
  5. Customer RFE requested to support update a dataset in
  appending mode.
  6. RSEAPI GET dataset/ {filter}
  /content (always) and rawContent (optional option) now include
  the content badhex recording and crlfnl substitution data
  7. The RSE API started task user ID must be permitted to read
  other users' log files with secure file access permissions
  (only the owner has access), and permitted to change ownership
  of the generated diagnostics archive file.
  8. Customer RFE requested to be able to list dataset (PDS)
  without its reference date updated.
  9. To implement the support of X. 509 certificate in client
  authentication for RSE API server.
  10. The feature was broken due to a safety internal void
  check introduced recently.
  

Problem conclusion

• 1. Add proper exception handling for NullPointerException and
  implement synchronization mechanisms for concurrent login/
  logout operations.
  2. RSEAPI user now can list dataset name using a filter with
  the new volser option
  3. Basic mvs operations support has been added to the RSEAPI
  MCP native tool
  4. RSEAPI server now can use the new environment
  RSEAPI_FORCE_LOGIN_TO_USE_JWT (default to true) configuration
  to allow users to log in using JWT without prior logon using
  credential
  5. RSEAPI user now can update dataset content in appending
  mode using the new request header option Append-Only set to
  true. This option defaults to false if not set.
  6. A data set file opening (downloading) with badhex reporting
  should be put in non-editable mode as the download content
  does not satisfy the roundtrip conversion.
  7. Define a z/OS UNIX superuser read access permission and
  superuser chown access permission for the RSE API started task
  user ID.
  8. The support is introduced in zExplorer and RSEAPI hosts.
  RSEAPI users now can list dataset attributes without its
  reference date updated using the request header option
  Include-DirSMS-Attrs set to false. (Note: using this option
  set to true will exclude the PDS directory and SMS information
  attributes from the query). This option defaults to false if
  not set.
  9. To implement the support of X. 509 certificate in client
  authentication for RSE API server.
  10. The feature was broken due to a safety internal void check
  introduced recently.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO08191

Modules/Macros

• HUH1SMPE HUH2RCVE HUH3ALOC HUH4ZFS  HUH5MKD  HUH6DDEF HUH7APLY
  HUH8ACPT HUHCRYPT HUHFT000 HUHFT001 HUHFT002 HUHFT003 HUHFT004
  HUHFT005 HUHFT006 HUHFT007 HUHFT008 HUHFT009 HUHFT010 HUHFT011
  HUHFT012 HUHMKDIR HUHMOUNT HUHPAX01 HUHRACF  HUHSETUP HUHSHPAX
  HUHSTC
  

Fix information

• Fixed component name

  EXP FOR ZOS RSE

• Fixed component ID

  5655EXP33

Applicable component levels

• R120 PSY UO08191

     UP26/06/20 P F606

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.