PI52180: Z/OSMF V2R2 INCORRECTLY DISPLAYS WARNING MESSAGE ABOUT IZUGUEST USER MISSING THE RESTRICTED ATTRIBUTE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The z/OSMF Liberty Server incorrectly reports the message:
  WARNING CWWKS2908W: SAF unauthenticated user IZUGUEST does not
   have the RESTRICTED attribute set.
  
  The IZUGUEST user is the default "unauthenticated" user for the
  z/OSMF server. It is used to represent accesses made to the
  server without logging in. This user should always be RESTRICTED
  in the security product.
  
  Even if the user is marked RESTRICTED in the security product,
  the z/OSMF V2R2 Liberty server does not properly detect the
  attribute and will still display the message.
  
  VERIFICATION STEPS:
  Note message CWWKS2908W.
  Check to ensure the listed user is configured in the security
  product with the RESTRICTED attribute correctly set.
  

Local fix

• The message can be ignored, if the user configuration in the
  security product has been validated.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM z/OS Management             *
  *                 Facility Version 2 Release 2.                *
  ****************************************************************
  * PROBLEM DESCRIPTION: Z/OSMF incorrectly displays warning     *
  *                      message about IZUGUEST user missing     *
  *                      the RESTRICTED attribute.               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  The z/OSMF Liberty Server incorrectly reports the message:
  WARNING CWWKS2908W: SAF unauthenticated user IZUGUEST does not
   have the RESTRICTED attribute set.
  
  The IZUGUEST user is the default "unauthenticated" user for the
  z/OSMF server. It is used to represent accesses made to the
  server without logging in. This user should always be RESTRICTED
  in the security product.
  
  Even if the user is marked RESTRICTED in the security product,
  the z/OSMF Liberty server does not properly detect the
  attribute and will still display the message.
  

Problem conclusion

• This APAR ships the fix in WebSphere APAR PI52181.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PI52181 UI34539 UI35417

Modules/Macros

• IZUGNBAF
  

Fix information

• Fixed component name

  Z/OSMF LIBERTY

• Fixed component ID

  5655S28WL

Applicable component levels

• R220 PSY UI34539

     UP16/02/24 P F602

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.