Closed Martin-Zeithaml closed 1 month ago
I think this is just a ZSS issue so I would like to move it there. Are you running with gateway? Then, SSO is used and auth requires ZSS can trust apiml tokens. If you don't see ZWES1601I in the log then it doesnt and something is broken with that part.
Yes, running with gateway and no ZWES1601I
in the log.
Hello @Martin-Zeithaml
GET /unixfile/contents/?responseType=raw HTTP/1.1
It looks like you're trying to get the root directory? This API will return the root directory if you can read it, like:
{ "entries": [ { "name": "a", "path": "b", "directory": "c" "size": "d" "ccsid": "e" "createdAt": "f" "mode": g "owner": "h" "group": "i" }, ..., ...
The format for a request for a file should be:
GET /unixfile/contents/<absolute_path_to_a_file>?responseType=raw
, like:
https://host:port/unixfile/contents/u/ibmuser/git/zowe-common-c/c/jcsi.c?responseType=b64
So, what's most likely happening is you're trying to get the files in the root (/), because the userInfo endpoint can't get your home directory. Do you have access to the root directory? If not, it would explain the error you're seeing from the API.
Could you try the following?
Note: I'd look into the userInfo endpoint failure. It calls this service: getpwnam_r()
. Do you have anything that could be preventing you from using it?
Yes, this is ACF2 system.
The message GET /unixfile/contents/?responseType=raw HTTP/1.1
was not changed. There is no userID in this message.
Users, who can read root directory, are getting the same error.
There is debug option _zss_traceLevel=5
, but there is no message from this check.
There is a URL in message ZWES1600I Go to it in your browser and see what it contains. If ZSS cannot get to that URL, then it cannot get ZWES1601I If you do not have ZWES1601I, you do not have SSO, which leads to the 401 you see.
@Martin-Zeithaml Did you try going to your home directory in the editor as a test to see if anything works? It would be very helpful for me to know if it's completely not working or if it's working in some cases.
ZWES1600I URL is returning (formatted and changed):
{
"keys": [
{
"kty": "RSA",
"e": "AQAB",
"use": "sig",
"kid": "short sequence of chars",
"alg": "RS256",
"n": "very long sequence of chars"
}
]
}
No ZWES1601I
in the log.
Editor is not working for any path.
How can I check the zss
ability to reach that URL?
Continue this issue under zss.
I am getting popular message for Editor: An unknown error occured: undefined
I have already checked couple items:
curl -k -H "Accept: application/json" -H "X-CSRF-ZOSMF-HEADER: true" "https://zOSMF:port/zosmf/info"
ZIS READ ZWES.IS
keytool -list -keystore safkeyring://ZOWEUSER/ZoweKeyringName -storetype JCERACFKS...
ExtKeyUsage [1.3.6.1.5.5.7.3.2 1.3.6.1.5.5.7.3.1]
Dev console
STC log
Any advice is welcome.