PI64628: IBM HTTP SERVER ON Z/OS IS DELETING THE WRONG IPC MESSAGE QUEUE

Fixes are available

APAR status

Closed as program error.

Error description

The IBM HTTP Server on z/OS uses msgctl (BPX1QCT) passing in
IPC_RMID to delete the IPC message queue has part of cleanup.
There are times, the the wrong IPC message queue id is used.  If
the userid the server runs with has UID 0, has read access to
BPX.DAEMON, or shares the same userid as some other
application, that application's message queue is deleted.  If
this isn't the case, then the system log will contain this
ICH408I message:
ICH408I USER(webid   ) GROUP(webgroup   ) NAME(user))
   CL(IPCOBJ  ) ID(0000000026)
  INSUFFICIENT AUTHORITY TO MSGCTL      CMD(IPC_RMID)
  EFFECTIVE UID(uuuuuuuu)  EFFECTIVE GID(gggggggg)
.
ADDITIONAL SYMPTOMS:
We have seen this issue affect TCPIP applications PAGENT and
IKED if the IPC message queues they use are deleted.  Their
logs will contain messages with these errors:
errno 121 (EINVAL - EDC5121I INVALID ARGUMENT)
errno2 11800302, 070B0302, 07500302 (JRIPCBADID)

Local fix

To stop the IHS server from deleting some other application's
IPC message queue, do not have the IHS server run with UID 0,
have read access to BPX.DAEMON, or share the same userid as some
other application. This will stop the actual delete of the IPC
message queue from being done.  But, will cause an ICH408I
message for
INSUFFICIENT AUTHORITY TO MSGCTL      CMD(IPC_RMID)
to be written to the system log since the server no longer has
the authority to delete another application's IPC message queue.

Problem summary

****************************************************************
* USERS AFFECTED:  Users of IBM HTTP Server (powered by        *
*                  Apache) on                                  *
*                  z/OS.                                       *
****************************************************************
* PROBLEM DESCRIPTION: IBM HTTP Server may generate "ICH408I"  *
*                      messages in the system log or interfere *
*                      with other applications message         *
*                      queues.                                 *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
IBM HTTP Server was removing message queues in a cleanup
function
but sometimes passing uninitialized memory for the message queue
ID
field.

Problem conclusion

IBM HTTP Server was updated to only remove our own message queue
ID.

This fix is targeted for IHS fixpacks:
 - 8.5.5.10
 - 9.0.0.1

(Does not apply to older releases)

Temporary fix

Comments

APAR Information

APAR number
PI64628
Reported component name
WAS IHS ZOS
Reported component ID
5655I3510
Reported release
850
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2016-06-21
Closed date
2016-06-23
Last modified date
2016-06-24

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WAS IHS ZOS
Fixed component ID
5655I3510

Applicable component levels

R850 PSY
UP
R90P PSY
UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS7K4U","label":"WebSphere Application Server for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"8.5","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
04 May 2022

Tips

PI64628: IBM HTTP SERVER ON Z/OS IS DELETING THE WRONG IPC MESSAGE QUEUE

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R850 PSY

R90P PSY

Document Information

Share your feedback

Need support?