PI65580: CAN NOT LOGIN TO Z/OSMF MESSAGE IZUG410E ICH408I

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Users are unable to log into z/OSMF and recieve message
  IZUG410E.  In addition, several ICH408I messages may appear on
  the console for DIRSRCH related to various files in the z/OS
  UNIX File System.
  
  The guest user (IZUGUEST by default) is being used to load files
  from the file system incorrectly.  If the
  RESTRICTED.FILESYS.ACCESS profile in the UNIXPRIV class is
  defined, then the guest user will be unable to access these
  necessary files.  This will be fatal to the operation of z/OSMF.
  
  In addition, since the IZUGUEST user is RESTRICTED, attempts to
  access resources protected via UACC will fail.  Some of these
  may not be fatal to the operation of z/OSMF.
  
  
  PE Information:
  
  User Affected: All users of z/OS Management Facility who have
  applied any of the PTF's below.
  
  HSMA210: UI37429
           UI38721
           UI37965
           UI36986
  
  HSMA220: UI36316
           UI36987
           UI37966
           UI38722
  
  User Impact: Apars UI36316/HSMA220 and UI37429/HSMA210
  introduced new function, but caused a problem in mainline
  function of z/OSMF.
  
  The original APARs added new notification and mobile functions.
  The other APARs that have since been issued have resolved hangs,
  corrected errors in displays and resolved performance issues
  
  
  The problem identified by this APAR represents an inability to
  use z/OSMF at all, when the UNIXPRIV RESTRICTED.FILESYS.ACCESS
  is defined.
  

Local fix

• If you do not have the offending PTFs installed, do not APPLY
  them.
  
  If you do not have RESTRICTED.FILESYS.ACCESS defined, then this
  defect should not cause an impact on your system.
  
  If your system does have RESTRICTED.FILESYS.ACCESS defined, then
  a temporary workaround would be to grant IZUGUEST READ access to
  the RESTRICTED.FILESYS.ACCESS profile.  This is IBM's current
  recommendation, however it should only be used pending a final
  fix for this issue.
  
  If you are unable to make the recommended security changes, then
  the only other workaround is to RESTORE the offending PTFs.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of IBM z/OS Management Facility,   *
  *                 HSMA210 AND HSMA220                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: CAN NOT LOGIN TO Z/OSMF                 *
  *                      WITH MESSAGE IZUG410E ICH408I SURFACE   *
  ****************************************************************
  * RECOMMENDATION: Apply this PTF                               *
  ****************************************************************
  Users are unable to log into z/OSMF and receive message
  IZUG410E.  In addition, several ICH408I messages may appear
  on the console for DIRSRCH related to various files in the
  z/OS UNIX File System. WebSphere Liberty changed the code
  to fix the issue.
  

Problem conclusion

• This APAR ships the fix in WebSphere APAR PI65658.
  

Temporary fix

• *********
  * HIPER *
  *********
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI40580 UI40581

Modules/Macros

•    IZUGNBAF
  

Fix information

• Fixed component name

  Z/OSMF LIBERTY

• Fixed component ID

  5655S28WL

Applicable component levels

• R210 PSY UI40580

     UP16/09/28 P F609 «

• R220 PSY UI40581

     UP16/09/28 P F609 «

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.