IBM Support

Message IOB002I received when starting the OSA-Express Direct Subagent

Troubleshooting


Problem

When starting the OSA-Express Direct Subagent (IOBSNMP), the subagent issues two messages: IOB002I COULD NOT OBTAIN HANDLE FROM AGENT. EXITING connect():: EDC5111I Permission Denied.

Symptom

In addition to the above messages, management applications will be unable to query OSA related data via SNMP.

Cause

IOBSNMP has not been defined as a superuser, IOBSNMP does not have the same group ID (GID) as the SNMP agent, or the DPI socket created by the agent was not created with permission bits 660.

The SNMP agent communicates with IOBSNMP using a z/OS UNIX path name. The SNMP agent creates this path name during startup. The default path name is /tmp/dpi_socket. If IOBSNMP (or any other subagent using a z/OS UNIX connection to the agent) does not have read and write access to this path name, those subagents will be unable to connect to the SNMP agent.

Diagnosing The Problem

An IOBSNMP debug trace, obtained by starting IOBSNMP with the -d 4 parameter, will show the IOB002I and EDC5111I messages.

Resolving The Problem

One of two things can be done to solve this problem.

  1. Define IOBSNMP as a z/OS UNIX superuser within the system's security product
  2. Start the SNMP agent with the parameter

    • -C 3
    This instructs the SNMP agent to create the DPI socket with the permission bits set to 666.

    For additional information, refer to the IP Configuration Reference.

[{"Product":{"code":"SSSN3L","label":"z\/OS Communications Server"},"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Component":"All","Platform":[{"code":"PF035","label":"z\/OS"}],"Version":"1.6;1.7;1.8;1.9;1.10;1.11;1.12;1.13;2.1;2.2;2.3","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]

Document Information

Modified date:
15 June 2018

UID

swg21299406