Re: SAVRSTOBJ and SNA errors

[Alexei Pytel <pytel@xxxxxxxxxx>]

I am positive that this is security.
This is what document says about sense code X'080F6051':
"080F           End User or LU Not Authorized:  The requesting
                end user or LU does not have the proper secu-
                rity authorization to access the requested
                resource.

        6051    Access Security Information Invalid:  The
                request specifies an Access Security
                Information field that is unacceptable to
                the receiver; for security reasons, no
                further detail on the error is provided.
                This sense data is sent in FMH-7 or
                UNBIND."

It's been a while, but I think that SAVRSTOBJ requires APPC SECURITY SAME.
This means that LU should be defined as secure location.
On OS/400 this is done via either APPC device description SECURELOC 
parameter or via APPN configuration list (WRKCFGL CFGL(*APPNRMT)).
If this worked before and then stopped working - it could be that somebody 
changed configuration (e.g. when APPC device is autocreated it will be 
SECURELOC(*NO) by default).
Hope this make sense.


    Alexei Pytel
always speaking for myself





Martin Rowe <martin@xxxxxxxxxx>
Sent by: midrange-l-bounces@xxxxxxxxxxxx
06/19/2003 01:54 PM
Please respond to Midrange Systems Technical Discussion

 
        To:     Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
        cc: 
        Subject:        Re: SAVRSTOBJ and SNA errors



On Thursday 19 June 2003 17:32, Alexei Pytel wrote:
> "The sense code is X'080F6051'"
> This sounds familiar! If my memory serves me well, this is APPC
> security problem.
> Check for expired or changed passwords, etc.

Hi Alexei

No Q* or other comms profiles at *DISABLED or with expired passwords (that 

weren't like that last week) or recently changed passwords on either box 
- but thanks for the suggestion.

Regards, Martin
-- 
martin@xxxxxxxxxx  AIM/Gaim: DBG400dotNet  http://www.dbg400.net   /"\
DBG/400 - DataBase Generation utilities - AS/400 / iSeries Open    \ /
Source free test environment tools and others (file/spool/misc)     X
Debian GNU/Linux | ASCII Ribbon Campaign against HTML mail & news  / \
_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing 
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.