PI44866: "ANS2603S BROWSER TRYING TO ESTABLISH CONNECTION TO CLIENT" ACCESSING WEBCLIENT FOR USS CLIENT AFTER JAVA 8 UPDATE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• After upgrading to Java 8, attempting to accessTivoli Storage
  Manager webclient for USS platform fails with:
  
  ANS2603S Browser trying to establish connection to client
  
  Java trace shows:
  
   Requested Java logs and trace:
  
     <date>2015-06-24T11:11:28</date>
    <millis>1435137088698</millis>
    <sequence>324</sequence>
    <logger>sun.plugin</logger>
    <level>FINE</level>
    <class>com.sun.deploy.trace.LoggerTraceListener</class>
    <method>print</method>
    <thread>8</thread>
    <message>24.06.2015 11:11:25: ANS2603S Browser trying to
  establish
    connection to client; received exception: {0}DcgBaseController
    (getNewIM): new IM caught Exception:
    java.security.AccessControlException: access denied
    ("java.net.SocketPermission" "xx.xx.xx.xx:1570"
  "connect,resolve")
  
  
  Tivoli Storage Manager Client Versions Affected:  6.1.x on USS
  platform
  
  
  Initial Impact: Medium
  
  Additional Keywords:  TSM client USS java 8 webclient
  

Local fix

• Edit the Java file named " java.policy " and add the following
  line :
  
  permission java.security.AllPermission.
  
  or
  "permission java.net.SocketPermission"xx.xx.xx.xx:*", "connect,
  resolve"; "
  
  (replacing xx.xx.xx.xx with appropriate ipaddress)
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users of Tivoli Storage Manager Web Client for z/OS USS      *
  * platform and Java 8                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * see ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * See Temporary fix.                                           *
  ****************************************************************
  

Problem conclusion

• Correct signing of the Java jar file resolves this error.
  

Temporary fix

• A fix for this problem is currently targeted for interim fix
  package 6.1.5.8  Until the interim fix is actually available,
  this information is subject to change at the discretion of IBM.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI35807 UI35808

Modules/Macros

• WEBGUI
  

Fix information

• Fixed component name

  TSM FOR OS/390

• Fixed component ID

  5698ISMVS

Applicable component levels

• R612 PSY UI35807

     UP16/03/04 P F603

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.