Previous topic |
Next topic |
Contents |
Contact z/OS |
Library |
PDF
EZD1223I z/OS Communications Server: IP Messages Volume 2 (EZB, EZD) SC27-3655-01 |
|
EZD1223I MLSCHK LOCAL ZONE HAS INCORRECT SECLABEL zonesl IPADR ipaddress
IF ifcname ZONE zonename zoneentry RESNM resourcename PRFNM profilename ExplanationIn a multilevel secure environment, an interface is configured into a NETACCESS security zone with an incorrect security label for the TCPIP job that owns the interface. See message EZD1215I for the security label of the TCPIP job. Local interface addresses must be in zones with the same security label as the TCPIP job. VIPAs on an unrestricted stack may be in a security zone with any security label that is currently active on that system. VIPAs on a restricted stack must be in zones with a security label that is not SYSMULTI and is equivalent to the TCPIP job. zonesl is the security label defined in the SECLABEL field in this SERVAUTH profile. If the SECLABEL field is blank, zonesl will be <NONE>. ipaddress is the IPv4 or IPv6 address on the local interface. ifcname is the name of the INTERFACE or IPv4 LINK statement that defined this IP address. zonename is the security zone name defined in the NETACCESS zone entry for this IP address. zoneentry is
the NETACCESS zone entry for this IP address. zoneentry will
one of the following:
resourcename is the name of the SERVAUTH resource. profilename is the name of the SERVAUTH profile that covers this resource name. System actionTCPIP continues. Operator responseContact the system programmer. System programmer responseVerify that:
See z/OS Communications Server: IP Diagnosis Guide for more information about diagnosing TCPIP access control problems. ModuleEZBTIMDF Procedure nameMLSCheck |
Copyright IBM Corporation 1990, 2014
|