When starting the OSA-Express Direct Subagent (IOBSNMP), the subagent issues two messages:
IOB002I COULD NOT OBTAIN HANDLE FROM AGENT. EXITING
connect():: EDC5111I Permission Denied.
In addition to the above messages, management applications will be unable to query OSA related data via SNMP.
IOBSNMP has not been defined as a superuser, IOBSNMP does not have the same group ID (GID) as the SNMP agent, or the DPI socket created by the agent was not created with permission bits 660.
The SNMP agent communicates with IOBSNMP using a z/OS UNIX path name. The SNMP agent creates this path name during startup. The default path name is /tmp/dpi_socket. If IOBSNMP (or any other subagent using a z/OS UNIX connection to the agent) does not have read and write access to this path name, those subagents will be unable to connect to the SNMP agent.
Diagnosing the problem
An IOBSNMP debug trace, obtained by starting IOBSNMP with the -d 4 parameter, will show the IOB002I and EDC5111I messages.
Resolving the problem
One of two things can be done to solve this problem.
- Define IOBSNMP as a z/OS UNIX superuser within the system's security product
- Start the SNMP agent with the parameter
This instructs the SNMP agent to create the DPI socket with the permission bits set to 666.
For additional information, refer to the IP Configuration Reference.