PM86131: ERROR MESSAGE CWWKS2910E WITH INTERNAL ERROR CODE 0X02008002 MAY OCCUR IN STRESS ENVIRONMENT WITH SAF SECURITY ENABLED.

APAR status

• Closed as program error.

Error description

• In a stress environment where SAF security is enabled, there may
  be FFDC's and error messages in the logs as follows:
  CWWKS2910E: SAF service WAS_INTERNAL did not succeed. SAF return
  code 0x00000000. RACF return code 0x00000000. RACF reason code
  0x00000000. Internal error code 0x02008002.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty Profile                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: During high workload and with SAF       *
  *                      security enabled, the SAF service       *
  *                      fails with internal error code          *
  *                      0x02008002.                             *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  For a WebSphere Application Server Liberty Profile for z/OS
  with SAF security enabled, the SAF service fails with the
  following exception because the native SAF credential token is
  being freed when performing a SAF operation,
  com.ibm.ws.security.thread.zos.internal.ThreadIdentityServiceImp
  l.setThreadSecurityEnvironment():281
  com.ibm.ws.security.saf.SAFException: CWWKS2910E: SAF service
  WAS_INTERNAL did not succeed. SAF return code 0x00000000. RACF
  return code 0x00000000. RACF reason code 0x00000000. Internal
  error code 0x02008002.
  at
  com.ibm.ws.security.thread.zos.internal.ThreadIdentityServiceImp
  l.setThreadSecurityEnvironment(ThreadIdentityServiceImpl.java:28
  1)
  at
  com.ibm.ws.security.thread.zos.internal.ThreadIdentityServiceImp
  l.set(ThreadIdentityServiceImpl.java:189)
  at
  com.ibm.ws.kernel.security.thread.ThreadIdentityManager.setAppTh
  readIdentity(ThreadIdentityManager.java:164)
  

Problem conclusion

• The code was modified to retry the SAF operation when the SAF
  credential token is being freed.
  
  The fix for this APAR is currently targeted for inclusion in
  fix pack 8.5.5.0. Please refer to the Recommended Updates page
  for delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  LIBERTY - Z/OS

• Fixed component ID

  5655W6514

Applicable component levels

• R850 PSY

     UP