PK79614: RMI/IIOP CLIENT GETS 0X49424000 MINOR 300 CORBA.NO_PERMISSION WHERE A MORE SPECIFIC CODE COULD BE RETURNED

Fixes are available

APAR status

Closed as program error.

Error description

When a RMI / IIOP Client attempts to connect to WebSphere with
a REVOKED userid or EXPIRED password, the following CORBA error
is sent back to the client:
.
org.omg.CORBA.NO_PERMISSION:   vmcid: 0x49424000  minor code:
300 completed: Maybe

RACF returns to WebSphere specific reson codes for revoked id or
expired password, so WebSphere should be able to pass this info
to the client

Expired password:
SAF product returnCode=8,
SAF product reasonCode=24.

Revoked userid:
SAF product returnCode=8,
SAF product reasonCode=28.

Local fix

Problem summary

****************************************************************
* USERS AFFECTED: All users of WebSphere Application Server    *
*                 V6.10 for z/OS                               *
****************************************************************
* PROBLEM DESCRIPTION: A couple of CORBA minor codes are       *
*                      introduced to indicate more granular    *
*                      cause of login error.                   *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
Following new CORBA minor codes are implemented when Local OS
user registry (System Authorization Facility (SAF) user
registry) is used.

Minor code value (in hex):  0x49424310
Minor code name:            RevokedUserid
Exception type:             NO_PERMISSION
Minor code description:     This code occurs when the user
registry returns an error which indicates user id is revoked
or user access to group is revoked.

Retry performed:            Yes





Minor code value (in hex):  0x49424311

Minor code name:            ExpiredPassword

Exception type:             NO_PERMISSION

Minor code description:     This code occurs when the user

registry returns an error which indicates password or password

phrase is expired.

Retry performed:            Yes

Problem conclusion

With this fix, two new CORBA minor codes are introduced

APAR PK79614 APAR requires changes to documentation.

NOTE: Periodically, we refresh the documentation on our
Web site, so the changes might have been made before yo
read this text. To access the latest on-line
documentation, go to the product library page at:

http://www.ibm.com/software/webservers/appserv/library

Changes to the WebSphere Application Server Version 6.1
Information Center will be made available in
July, 2009.

The following information about two new CORBA minor codes
will be added to table of CORBA minor codes that is
included in the topic "Security components
troubleshooting tips:"

Minor code name              RevokedUserid
Minor code value (in hex)    49424310
Exception type           NO_PERMISSION
Minor code description       This error occurs when the
                             user registry has returns an
                             error that indicates the user
                             ID is revoked or user access
                             to the group is revoked for
                             the user ID.
                             This code is only issued by the
                             z/OS localOS User Registry,
                             which is also referred to as the
                             SAF User Registry.
Retry performed              Yes

Minor code name              ExpiredPassword
Minor code value (in hex)    49424311
Exception type           NO_PERMISSION
Minor code description       This error occurs when the user
                             registry returns an error that
                             indicates that either the
                             password, or password phrase is
                             expired.

                             This code is only issued by the
                             z/OS localOS User Registry,
                             which is also referred to as the
                             SAF User Registry.
Retry performed              Yes

APAR PK79614 is currently targeted for inclusion in Service
Level (Fix Pack) 6.1.0.27 of WebSphere Application Server V6.1
for z/OS.

Please refer to URL:
//www.ibm.com/support/docview.wss?rs=404&uid=swg27006970
for Fix Pack availability.

Temporary fix

Comments

APAR Information

APAR number
PK79614
Reported component name
WEBSPHERE FOR Z
Reported component ID
5655I3500
Reported release
610
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2009-01-28
Closed date
2009-05-28
Last modified date
2009-10-03

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

PK80348

Fix information

Fixed component name
WEBSPHERE FOR Z
Fixed component ID
5655I3500

Applicable component levels

R610 PSY UK49671
UP09/09/21 P F909

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.1","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
29 December 2021

Tips

PK79614: RMI/IIOP CLIENT GETS 0X49424000 MINOR 300 CORBA.NO_PERMISSION WHERE A MORE SPECIFIC CODE COULD BE RETURNED

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R610 PSY UK49671

Fix is available

Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

Document Information

Share your feedback

Need support?