JOBF in and out of z/OS USS fails: EDC5139I Operation not permitted

Document ID : KB000087737
Last Modified Date : 14/04/2018
Show Technical Document Details
Issue:
Error Message :
U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.

File transfers (FT) between Unix System Services & Hierarchical File Systems z/OS fail.

Transfer from UNIX to z/OS USS:
2015-10-16 17:50:29 - U0011124 Selection started with filter '/home/s46jz8/testfile1.txt' ...
2015-10-16 17:50:29 - U0011125 '/home/s46jz8/testfile1.txt'
2015-10-16 17:50:29 - U0011126 Files selected: '1'.
2015-10-16 17:50:29 - U0011134 ERROR '0' bytes, incorrect transfer of '1' records for file '/home/s46jz8/testfile1.txt'->'/home/s46jz8/testfile1.txt'. Duration '00:00:00'.
2015-10-16 17:50:29 - U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
2015-10-16 17:50:29 - U0011409 FT '29893381': FileTransfer ended abnormally.

Agent log:
20151016/175028.979 - U2002039 Successfully established connection with '10.51.20.193:57302' (socket handle = '10').
20151016/175028.979 - U2000006 Connection to Agent 'CHRVL360(10,ID=816)' was successfully established.
20151016/175029.006 - U2000134 Thread '*FT(29893381)' started.
20151016/175029.008 - U2000102 Error when calling the function 'setgid', error code '139(EDC5139I Operation not permitted.)'.
20151016/175039.000 - U2000135 Thread '*FT(29893381)' ended.
20151016/175039.000 - U2000007 Connection to Agent 'CHRVL360(10,ID=816)' terminated.


Transfer from z/OS USS to UNIX:
2015-10-16 18:10:02 - U2000102 Error when calling the function 'opendir', error code '111(EDC5111I Permission denied.)'.
 
Agent log:
20151016/181002.309 - U2000013 Connection to Agent 'CHRVL360' initiated.
20151016/181002.310 - U2000006 Connection to Agent 'CHRVL360(10,ID=818)' was successfully established.
20151016/181002.311 - U2000134 Thread '*FT(29898208)' started.
20151016/181002.312 - U0011124 Selection started with filter '/home/s46jz8/testfile1.txt' ...
20151016/181002.323 - U2000102 Error when calling the function 'opendir', error code '111(EDC5111I Permission denied.)'.
20151016/181002.323 - U2000135 Thread '*FT(29898208)' ended.
20151016/181002.323 - U2000007 Connection to Agent 'CHRVL360(10,ID=818)' terminated.

The Transfer from/to USS file system does not work properly when switching between FT and Agent users.
Function call seteuid()/setegid() may fail. Sequence of effective user switch may be wrong, it appears that the Agent does not have the proper authority.

Note: Needed permissions for agent user:
FACILITY class, BPX.SERVER profile with READ access
FACILITY class, BPX.DAEMON profile with READ access
FACILITY class, BPX.SUPERUSER profile with READ access
UserID of Agent user must not be zero! With BPX.SUPERUSER it should be able to change effective UserID.

 
Environment:
OS: Z/OS
Cause:
Cause type:
Defect
Root Cause: Transfer from/to USS filesystem fails in certain cases, when switching between FT and agent user. Function call seteuid()/setegid() may fail. Sequence of effective user switch may be wrong, looks that agent doesn't have enough authority.
Resolution:
This field was added on 30/03/2017. This article has not been updated yet. Refer to the "Description" or "Workaround" sections for solution information.

Fix Status: Released

Fix Version(s):
Component(s): Agent MVS

Automation Engine 11.2.2 - Available
Automation Engine 11.1.4 - Available
Automation Engine 10.0.8 - Available
Additional Information:
Workaround :
From version 11.x: Use thread level security feature, which can be activated with an INI file setting:(GLOBAL)ft_thread_level_security=yes