IBM Support

OMEGAMON Configuration Manager GENERATE or PARMGEN KCIJPSEC and KOMSUPD job error RC=8

Troubleshooting


Problem

This issue generally affects only new IBM OMEGAMON for z/OS V550 and V551 user installations.

For Configuration Manager users:

  • Find and update <rte_hilev>.SECEXITS(KOMSUPDI) member.
For PARMGEN users:
  • Find and update <rte_hilev>.RKANSAMU(KOMSUPDI) member.
The security exit library might be different in your environment.
For details, please refer to RTE_X_SECURITY_EXIT_LIB - IBM Documentation.
The best practice is to use EXTERNAL OMEGAMON security.
External security is enabled by default with PASSPHRASE use:
External security can also be used with the regular z/OS password (up to 8 characters):
PASSWORD fields in KxxSUPDI members are meant for INTERNAL OMEGAMON security only.
Disabling INTERNAL security can be done by commenting out PASSWORD fields in KxxSUPDI members:
 *--------------------------------------------------------------------
 * TO USE INTERNAL SECURITY (NOT RECOMMENDED), UNCOMMENT AND UPDATE   
 * THE FOLLOWING PASSWORD STATEMENTS TO DEFINE THE PASSWORD FOR EACH  
 * AUTHORITY LEVEL (1,2,3).  EACH LEVEL MUST HAVE A UNIQUE PASSWORD.  
 *                                                                    
 * THE USER ENTERS PASSWORDS WITH THE /PWD INFO LINE COMMAND, AND THE 
 * AUTHORITY LEVEL IS SET ACCORDINGLY.  TO RESET A SESSION'S          
 * AUTHORITY LEVEL TO ZERO, ENTER AN INVALID PASSWORD OR PRESS THE    
 * PA1 KEY.                                                           
 *                                                                    
 *      PASSWORD=,LEVEL=1                                             
 *      PASSWORD=,LEVEL=2                                             
 *      PASSWORD=,LEVEL=3                                             
 *--------------------------------------------------------------------

Alternatively, you can provide custom password values.

As an example, KOMSUPDI member may look like this:

*--------------------------------------------------------------------
* TO USE INTERNAL SECURITY (NOT RECOMMENDED), UNCOMMENT AND UPDATE   
* THE FOLLOWING PASSWORD STATEMENTS TO DEFINE THE PASSWORD FOR EACH  
* AUTHORITY LEVEL (1,2,3).  EACH LEVEL MUST HAVE A UNIQUE PASSWORD.  
*                                                                    
* THE USER ENTERS PASSWORDS WITH THE /PWD INFO LINE COMMAND, AND THE 
* AUTHORITY LEVEL IS SET ACCORDINGLY.  TO RESET A SESSION'S          
* AUTHORITY LEVEL TO ZERO, ENTER AN INVALID PASSWORD OR PRESS THE    
* PA1 KEY.                                                           
*                                                                    
       PASSWORD=MYPASS01,LEVEL=1                                     
       PASSWORD=MYPASS02,LEVEL=2                                     
       PASSWORD=MYPASS03,LEVEL=3                                     
*--------------------------------------------------------------------

MCM users, rerun GENERATE.

PARMGEN users, rerun KCIJPSEC or KOMSUPD security jobs.

More information:

PASSWORD - IBM Documentation

Modify the security table for RACF - IBM Documentation

Symptom

GENERATE, KCIJPSEC or KOMSUPD job output:
PROCSTEP    RC
GENERATE    08
KFU00016E Program has failed; PROGRAM=KOBSUPDT RC=8
KFU00003I Workflow task recap: Programs=125 MaxRC=8 REXX=21 MaxRC=4
KFU00004I KCIOMEGA is ending; RC=8 SYSPLEX=plex   LPAR=xyzc DATE=2028-08-32 00:00:00 Wednesday
 KFU00005I Program is about to be invoked; PROGRAM=KOBSUPDT
 >Data Set allocation
  DD=SYS00002 DSN=NULLFILE
  DD=KCIFLOW1 DSN=<tlib_hlq>.TKANCUS
  DD=FLOWLIB  DSN=<tlib_hlq>.TKANCUS
  DD=SYSLIB   DSN=<rte_hilev>.RKANMODU
  DD=SYSPRINT DSN=sysprint
  DD=SYSIN    DSN=<rte_hilev>.SECEXITS(KOMSUPDI)
 KFU00016E Program has failed; PROGRAM=KOBSUPDT RC=8
 KFU00003I Workflow task recap: Programs=125 MaxRC=8 REXX=21 MaxRC=4
 KFU00004I KCIOMEGA is ending; RC=8 SYSPLEX=plex LPAR=xyzc DATE=2028-08-32 00:00:00 Wednesday
KOMSUPDI  08
KOMSUPDI - STEP WAS EXECUTED - COND CODE 0008
OB9012 PASSWORD IS OF AN INVALID LENGTH. MUST BE BETWEEN 1 AND 8 CHARACTERS   
       PASSWORD=,LEVEL=1                                                      
OB9012 PASSWORD IS OF AN INVALID LENGTH. MUST BE BETWEEN 1 AND 8 CHARACTERS   
       PASSWORD=,LEVEL=2                                                      
OB9012 PASSWORD IS OF AN INVALID LENGTH. MUST BE BETWEEN 1 AND 8 CHARACTERS   
       PASSWORD=,LEVEL=3                                                      

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB70","label":"Z TPS"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSGHN2","label":"IBM OMEGAMON for z\/OS"},"ARM Category":[{"code":"a8m0z00000008mTAAQ","label":"OMEGAMON for zOS-\u003ESecurity"}],"ARM Case Number":"TS015741372","Platform":[{"code":"PF035","label":"z\/OS"}],"Version":"5.5.0"}]

Document Information

Modified date:
18 April 2024

UID

ibm17148060

Page Feedback