z/OS Communications Server: IP Messages Volume 4 (EZZ, SNM)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZZ8319I

z/OS Communications Server: IP Messages Volume 4 (EZZ, SNM)
SC27-3657-01

EZZ8319I
DVIPA dvipa WITH ZONE SECLABEL zone_seclabel NOT PERMITTED ON tcpjobname WITH stack_seclabel

Explanation

There is a configuration conflict between TCP/IP and the security server. tcpjobname is processing a VIPADEFINE or VIPABACKUP statement for dvipa. This IP address has a security label that is incompatible with the security label of tcpjobname.

dvipa is the dynamic VIPA.

zone_seclabel is the security label assigned to the zone resource profile.

tcpjobname is the job name of target TCP/IP stack.

stack_seclabel is the security label of the user ID under which tcpjobname is running.

System action

The VIPADEFINE or VIPABACKUP statement is rejected. Processing continues.

Operator response

Save the system log for problem determination. Notify the network and security administrators.

System programmer response

For all multilevel security stacks, dvipa must be in a NetAccess security zone and zone_seclabel must be defined and active on the system (mvsname). For multilevel security restricted stacks, zone_seclabel must not be SYSMULTI and must be equivalent to stack_seclabel.

  1. Check that dvipa is configured into the correct NetAccess security zone (zonename) in tcpjobname TCP/IP Profile.
  2. Check that the security server resource profile for EZB.NETACCESS.mvsname.tcpjobname.zonename exists and has the correct security label assigned.
  3. Check that tcpjobname is running under the intended user ID and with the correct security label 4. Check that tcpjobname is intended to be the owning or backup stack for dvipa.
  4. Check that the security label zone_seclabel is defined and active on mvsname. See z/OS Communications Server: IP Configuration Guide for more information about configuring TCP/IP in a multilevel security environment.

Module

EZBXFDYN PLX, EZBX6DYN PLX

Procedure name

ValidateVDEF and ValidateVBkUp

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014