search

zowe / docs-site

Documentation for the Zowe project
https://docs.zowe.org/
Creative Commons Attribution 4.0 International
70 stars 133 forks source link

zFS for zssServer must be mounted with SETUID option #705

Open jthyssenrocket opened 5 years ago

jthyssenrocket commented 5 years ago

zssServer runs program controlled which requires that the zFS is mounted with option SETUID. If the zFS is mounted with option NOSETUID zssServer is no longer program controlled and certain API calls can fail with BPXTLS failed: rc=-1, return code=139, reason code=0x0be802af

I suggest this information is added to troubleshooting section and/or document that the zFS should be mounted with SETUID. If might also be possible to script over "df -v" to check if the "No setuid" option is set for the installation directory.

This is relevant for the SMP/E program directory as well.

See information on SETUID/NOSETUID here: https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.bpxa500/tsomount.htm

"Also, if you specify the NOSETUID option on MOUNT, the APF extended attribute and the Program Control extended attribute are not honored."

nannanli commented 5 years ago

@jasonenglish2039 Hi Jason, from initial reading, this sounds like a troubleshooting tip about for the App Framework. But it's also related to SMP/E. I'm assigning you and me at this point to investigate.

jthyssenrocket commented 5 years ago

FYI: I've opened https://github.com/zowe/zowe-install-packaging/issues/807 for adding a check for this prereq to the install scripts. I've come across this at two customers installing a commercial Zowe based product.