OA32273: EACCES: PERMISSION IS DENIED FROM UNMOUNT OF LEGACY (MVS) DATA SETS IN SAF MODE

A fix is available

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • EACCES: Permission is denied from unmount of Legacy (MVS) data
    sets in SAF mode
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: If the zOS Server is configured for a SAF    *
    *                 mode (SAF,SAFEXP) and the NFS client is      *
    *                 mounted to a zOS MVS dataset or High Level   *
    *                 Qualifier on the zOS NFS server and, the     *
    *                 user hss not performed an mvslogin,          *
    *                 the unmount attempt may fail with EACCESS    *
    *                 if the server attributes timeout has         *
    *                 expired.                                     *
    ****************************************************************
    * PROBLEM DESCRIPTION: An unmount should not require an        *
    *                      mvslogin even if the zOS NFS Server     *
    *                      is in a SAF mode.                       *
    *                      Some clients may send down an attribute *
    *                      type command to the mountpoint and the  *
    *                      security check should be bypassed       *
    *                      for permitted attribute commands to     *
    *                      retrieve attribute information, and     *
    *                      allow the unmount to proceed.           *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    If the zOS Server is configured for a SAF
    mode (SAF,SAFEXP) and the NFS client is
    mounted to a zOS MVS dataset or High Level
    Qualifier on the zOS NFS server and, the
    user hss not performed an mvslogin,
    the unmount attempt may fail with EACCESS
    if the server attributes timeout has
    expired.
    

Problem conclusion

  • The following operations will be permitted to execute
    to a mountpoint when the
    the server is in a SAF mode, even the user on the NFS client
    is not mvslogin.
    
    NFSv4 operatons: NVERIFY,VERIFY,GETATTR
    NFSv3 procedures: GETATTR,FSSTAT
    NVSv2 procedures: GETATTR,STATFS
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA32273

  • Reported component name

    NETWORK FILE SY

  • Reported component ID

    5695DF121

  • Reported release

    AN0

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2010-03-11

  • Closed date

    2010-05-17

  • Last modified date

    2010-07-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA54300 UA54301 UA54302

Modules/Macros

  • GFSAXMSC
    

Fix information

  • Fixed component name

    NETWORK FILE SY

  • Fixed component ID

    5695DF121

Applicable component levels

  • RAN0 PSY UA54300

       UP10/06/09 P F006

  • RB1N PSY UA54301

       UP10/06/09 P F006

  • RC1N PSY UA54302

       UP10/06/09 P F006

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.



Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

z/OS family

Software version:

AN0

Operating system(s):

MVS, z/OS

Reference #:

OA32273

Modified date:

2010-07-02

Translate my page

Machine Translation

Content navigation