IBM Support

PI47779: RDZ V9015 INTERNAL DEFECTS AND ENHANCEMENTS - RSE

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • RDZ V9015 INTERNAL DEFECTS AND ENHANCEMENTS - RSE
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: 01.All RDz users                             *
    *                 02.All RDz users                             *
    *                 03.All RDz users                             *
    *                 04.RDz systems programmer                    *
    *                 05.RDz systems programmer                    *
    *                 06.All RDz users                             *
    *                 07.All RDz users                             *
    *                 08.All RDz users                             *
    *                 09.All RDz users                             *
    *                 10.z/OS system programmer                    *
    *                 11.RDz support                               *
    *                 12.RDz support                               *
    *                 13.RDz administrators                        *
    *                 14.All Host Configuration Utility users      *
    *                 15.All RDz users                             *
    *                 16.All RDz users                             *
    *                 17.CA TopSecret/ACF2 users                   *
    ****************************************************************
    * PROBLEM DESCRIPTION: 01.RDz receives an abend 213-30 when    *
    *                         saving a member of a PDS.            *
    *                      02.RDz v9 server gets ABENDS878-10 in   *
    *                         LSQA Below 16MB filled with RACF     *
    *                         ACEE and ACEX control blocks         *
    *                      03.RDz server should have better        *
    *                         serviceability by showing friendly   *
    *                         cipher names and should synchronize  *
    *                         enabled ciphers.                     *
    *                      04.rsed.envvars variable                *
    *                         _RSE_HOST_CODEPAGE of Rational       *
    *                         Developer for System z is used only  *
    *                         by Java for internal processes, not  *
    *                         for accessing customer data, and     *
    *                         should not be changed. Therefore,    *
    *                         the variable is moved to the         *
    *                         do-not-touch section of              *
    *                         rsed.envvars.                        *
    *                      05.Simplify management of encrypted     *
    *                         communication in RDz.                *
    *                      06.TLSv1.0 is always enabled even if    *
    *                         it is disabled in rsed.envvars       *
    *                      07.SSL protocols and enabled ciper      *
    *                         suites information are not passed    *
    *                         to dstore.                           *
    *                      08.RDz server disables the ssl          *
    *                         protocols whose environment          *
    *                         variable is not defined in           *
    *                         rsed.envvars.                        *
    *                      09.NPE occurs in rse server when the    *
    *                         communication with a client is not   *
    *                         stable.                              *
    *                      10.RDz does not support Java 8.0        *
    *                      11.RDz's FEKLOGS log gathering tool     *
    *                         analyzes /tmp when it's not used as  *
    *                         TMPDIR value in rsed.envvars         *
    *                      12.(RDz) enhancement to show hardware   *
    *                         info in FEKLOGS                      *
    *                      13.MvsConsole.wto(String,int,int) that  *
    *                         RDz server calls does not look at    *
    *                         file.encoding value and it causes    *
    *                         outputting nothing on the operator   *
    *                         command D P,D when running on        *
    *                         java8.                               *
    *                      14.rsed.envvars generated by RDz        *
    *                         CfgUtil is truncated                 *
    *                      15.Rational Developer for System z      *
    *                         (RDz) server may not start due to    *
    *                         0C4 abend in getSSLProperties()      *
    *                      16.RDz server abend 0C1 in function     *
    *                         putFile                              *
    *                      17.In RDz v9.1.1.0 users are no longer  *
    *                         able to allocate, delete or rename   *
    *                         datasets. When users try allocating  *
    *                         the dataset, they are presented      *
    *                         with the following error:            *
    *                         MVSFileSystemMiner: FFS error:       *
    *                         severity=8, msgNo=2212, opcode=42,   *
    *                         rc=0, reason=0, message=IKJ56644I    *
    *                         NO VALID TSO USERID, DEFAULT USER    *
    *                         ATTRIBUTES USED                      *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    01.When a previous upload request is pending and client sends
       another upload request, abend 213-30 may occur. After the
       abend occurs, it is sometimes required to restart the RDz
       server to free the allocated resources.
    02.The LSQA area of RDz v9 server becomes filled with many
       ACEEs, because it does not release the ACEE object created
       in a user authentication process.
    03.RDz server should have better serviceability by showing
       friendly cipher names and should synchronize enabled
       ciphers.
    04.rsed.envvars variable _RSE_HOST_CODEPAGE of Rational
       Developer for System z is used only by Java for internal
       processes, not for accessing customer data, and should not
       be changed. Therefore, the variable is moved to the
       do-not-touch section of rsed.envvars.
    05.Simplify management of encrypted communication in Rational
       Developer for System z. rsed.envvars now has samples for
       System SSL variables GSK_PROTOCOL_* and GSK_V3_CIPHER_SPECS.
       _RSE_JAVAOPTS variable DSTORE_SSL_ALGORITHM in rsed.envvars
       is removed, as protocol selection is now managed via the
       GSK_PROTOCOL_* variables.
    06.TLSv1.0 is always enabled even if it is disabled in
       rsed.envvars
    07.SSL protocols and enabled ciper suites information are not
       passed to dstore.
    08.RDz server disables the ssl protocols whose environment
       variable (GSK_PROTOCOL_XXXVNN) is not defined in
       rsed.envvars.
    09.NPE occurs in rse server when a request message is not fully
       received due to communication problems. 181 ERROR RseDaemon:
       java.lang.NullPointerException 182
       java.lang.NullPointerException 183 at
       java.util.StringTokenizer.<init>(StringTokenizer.java:88)
       184 at
       java.util.StringTokenizer.<init>(StringTokenizer.java:66)
       185 at
       com.ibm.etools.zos.server.RseDaemon.main(RseDaemon.java:453)
    10.Rational Developer for System z does not support Java 8.0,
       and startup fails if you do try to use it. The problem lies
       in a faulty code-page interpretation by Java 8.0. The
       solution is to use _RSE_HOST_CODEPAGE=cp1047 instead of
       IBM-1047.
    11.Rational Developer for System z's FEKLOGS log gathering tool
       analyzes /tmp when it's not used as TMPDIR value in
       rsed.envvars. This can result in warning messages.
    12.(Rational Developer for System z) enhancement to show
       hardware info in FEKLOGS
    13.RDz sever calls MvsConsole.wto(String,int,int) to output the
       result of the operator commands to the console. This method
       does not look at file.encoding value and it causes
       outputting nothing on the operator command D P,D when
       running on java8.
    14.rsed.envvars generated by Rational Developer for z Systems
       CfgUtil is truncated. IT stops at the first < symbol.
    15.Rational Developer for System z (RDz) server may not start
       due to 0C4 abend. If feklogs is collected, it will show the
       following information: CEE3204S The system detected a
       protection exception (System Completion Code=0C4) at
       com.ibm.etools.zos.server.CoreJNI.getSSLProperties(Native
       Method)
    16.When MVSFileSystemMiner.internalFinish() is called while
       disconnect, MVSByteStreamHandler.finish() is called and the
       unclosed uploading data should be flushed to the file by
       another thread and MVSByteStreamHandler.finish() does not
       wait for the completion of the flush operation. If
       FFSServerImpl.term() is called and the resources for the
       session are freed, the flush operation does not work
       correctly and we should see C1 abend.
    17.In Rational Developer for System z v9.1.1.0 users are no
       longer able to allocate, delete or rename datasets if the
       started task userid does not have TSO segment or lacks the
       permit. When users try allocating the dataset, they are
       presented with the following error: MVSFileSystemMiner: FFS
       error: severity=8, msgNo=2212, opcode=42, rc=0, reason=0,
       message=IKJ56644I NO VALID TSO USERID, DEFAULT USER
       ATTRIBUTES USED
    

Problem conclusion

  • 01.The server code is fixed to force the previous pending
       uploading request closed when the next upload request comes,
       and to free all the allocated resources when client
       disconnects.
    02.RDz v9 server is updated to call RACROUTE REQUEST=VERIFY
       ENVIR=DELETE after a successful RACROUTE REQUEST=VERIFY
       ENVIR=CREATE call.
    03.RDz server is updated to show friendly cipher names and to
       synchronize enabled ciphers.
    04.rsed.envvars variable _RSE_HOST_CODEPAGE of Rational
       Developer for System z is used only by Java for internal
       processes, not for accessing customer data, and should not
       be changed. Therefore, the variable is moved to the
       do-not-touch section of rsed.envvars.
    05.Simplify management of encrypted communication in Rational
       Developer for System z. rsed.envvars now has samples for
       System SSL variables GSK_PROTOCOL_* and GSK_V3_CIPHER_SPECS.
       _RSE_JAVAOPTS variable DSTORE_SSL_ALGORITHM in rsed.envvars
       is removed, as protocol selection is now managed via the
       GSK_PROTOCOL_* variables.
    06.The hard coded code to enable TLS v1.0 is removed. All
       information will come from rsed.envvars.
    07.Thread pool process calls setEnabledProtocols(),
       setDisabledProtocolPatterns() and setEnabledCipherSuites()
       to synchronize the protocols and cipher suites more
       precisely.
    08.The ssl protocol, that are used in the established
       connection of in the first rse daemon process, is passed to
       the thread pool process to direct java security system to
       enable.
    09.RDz server code is updated not to raise NPE even if a
       request message is not fully received.
    10.sample rsed.envvars is updated to use
       _RSE_HOST_CODEPAGE=cp1047 instead of IBM-1047.
    11.code updated to use TMPDIR everywhere
    12.enhancement to show hardware info in FEKLOGS
    13.RDz server code is updated to call
       MvsConsole.wto(WtoMessage,String) where RDz server can
       specify System.getProperty("file.encoding") as the second
       argument.
    14.typo in skeleton corrected so that ISPF services no longer
       interpret < and >.
    15.There is a code error in getSSLProperties() to read a
       configuration file and the error causes the abend in some
       specifc system condition. getSSLProperties() function is
       removed not to read the file in the native code, and java
       code will pass the required information by a new JNI
       function, setSSLProperties().
    16.RDz server code has been updated to wait for the completion
       of the file flush operation before releasing the resources
       in the disconnect operation.
    17.When invoking java Runtime.getRuntime().exec(command) in a
       client's thread, the command is executed in the client's
       userid ownership in RACF but not in CA TopSecret/ACF2. With
       this fix, at the time of the Connect, the server program
       will check if java Runtime.getRuntime().exec(command)
       executes the command under the client's userid ownership or
       not. If not, the TSO command will be executed by TSO Command
       gateway instead of java Runtime.getRuntime().exec().
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI47779

  • Reported component name

    RD/Z HOST

  • Reported component ID

    5724T0723

  • Reported release

    900

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-08-29

  • Closed date

    2016-04-25

  • Last modified date

    2016-05-17

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  • FEK#LVL# FEKFCIPH FEKFCORE FEKFCOR6 FEKFDST0
    FEKFENVR FEKFMAIN FEKFMAI6 FEKFMINE FEKFOMVS FEKFRIVP FEKFT004
    FEKFT005 FEKFZOS  FEKLOGR  FEKRSEDE
    

Fix information

  • Fixed component name

    RD/Z HOST

  • Fixed component ID

    5724T0723

Applicable component levels

  • R900 PSY UI37287

       UP16/05/17 I 1000

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.



Document information

More support for: Rational Developer for System z

Software version: 9.0

Reference #: PI47779

Modified date: 17 May 2016