The following error message appeared in CA-LDAP, every time after a POSTDEL:
SECIN98I POSTDEL BPXP005I A FORK OR SPAWN ERROR WAS ENCOUNTERED. RETURN CODE 00000070 REASON CODE 0B0C00FC
In the file 'slapd.conf', only some of the 'siParms' are used, yet they're all uncommented. If you don't need them all comment out the ones you don't use, i.e.:
# preModLidMessage PREMOD
# postModLidMessage POSTMOD
# preDelLidMessage PREDEL
# postDelLidMessage POSTDEL
Also, 'TSO' isn't actually needed to use LDAP, on a System running ACF2, if not doing CREATE/DELETE Alias. But, OMVS is required no matter what! Add an OMVS Segment to all Users that will use the LDAP Server.
After reviewing the ACFRPTOM Report, we seeing the following entries at the same time the BPXP005I message is produced that correspond to initUSP failures, the entry is:
initUSP IGASYU1 * N/A N/A 8 8 24
03/29/18 18.088 18.09.43 IGASYU1 CPFD CPFD
Failed - User incompletely defined as OpenMVS user
...this shows up as Group '*' on the Report. This means that the User has no GROUP on their LIDREC. Also, we note that this is a different User than 'IGASYP1'. Please can you confirm that you have a Group for your 'IGASYU1' User, as an example: ==========================
CHA IGASYU1 GROUP(omvsgrp)
...where 'omvsgrp' is any valid Group? Please can you also confirm that there is a valid OMVS Segment for that User as well?
Since you seem to be using multiple UserIDs, please can you check that any other User trying to login to LDAP has both a valid OMVS Segment as well as a GROUP.
If you're not sure what Users have Groups, one way to list Logonid Records that don't have a Group specified is via the following commands:
LIST IF(GROUP LE X'40') SECTION(RESTRICTIONS) PROFILE(OMVS) ======================================================
...then you will be able to review these Logonid Records, one at a time, assigning GROUP to any that don't have a GROUP, or do a mass change, for example:
CHANGE IF(GROUP LE X'40') GROUP(dftgroup)
...specify the Default Group instead of 'dftgroup'.