AH00526: … \xac
I got AH00526:
Syntax error on line … of…: RewriteRule: bad argument line ‘\xac/…
This was because I had ^ and I needed ¬ in the documents.
The USS command chtag -p /u/mqweb3/conf/443.conf gave me
untagged T=off /u/mqweb3/conf/443.conf
My 3270 emulator code page was Bracket CP 037 modified.
Using the ISPF edit command hex on, showed the correct hex data is x’5f’. This can display as ¬ or as ^ depending on your 3270 emulator.
IKYC901I Error 76677164 initializing ICL: The CA certificate in the ICL does not match the one in the keyring
I got this when I redefined my userids and keyrings. I recreated the VSAM files. Display the ICL VSAM file
export PATH=/usr/lpp/pkiserv/bin/
export LIBPATH=/usr/lpp/pkiserv/lib
export NLSPATH=/usr/lpp/pkiserv/lib//usr/lpp/nls/msg/%L/%N
/usr/lpp/pkiserv/bin/iclview -d \’PKISRVD.VSAM.ICL\’
Need to escape the data set name.
My file was empty, so I recreated the VSAM data sets.
IKYP022I Unable to register PKI Services for restart: Error 12, Reason 0x160
This server has not been set up for ARM ( Automatic Restart Management).
Ignore it.
IKYC009I LDAP post unsuccessful for object id = 101, state = 0x2150000, status =
581500960: No such object
IKYP039E DIRECTORY POST UNSUCCESSFUL. ERROR CODE = 581500960
Unable to get the CA DN from the LDAP server. Check the suffix (eg CN=PKICA,OU=SSS,O=ZZUR COMPANY
IKYP040I PKI SERVICES DOES NOT HAVE KEY GENERATION CAPABILITY
If you are running on ZPDT, then this is not supported.
httpd: SSL0222W: SSL Handshake Failed, No ciphers specified (no shared
ciphers or no shared protocols).
During a TLS handshake there was no matching certificate found for the client.
I added
SSLCipherSpec TLS_AES_128_GCM_SHA256
SSLCipherSpec TLS_AES_256_GCM_SHA384
SSLCipherSpec TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SSLCipherSpec TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
SSLCipherSpec TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
SSLCipherSpec TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
SSLCipherSpec TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
SSLCipherSpec TLS_RSA_WITH_AES_128_GCM_SHA256
SSLCipherSpec TLS_RSA_WITH_AES_256_GCM_SHA384
SSLCipherSpec TLS_RSA_WITH_AES_128_CBC_SHA
SSLCipherSpec TLS_RSA_WITH_AES_256_CBC_SHA
SSLCipherSpec TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
ICH408I USER(…) GROUP(…) NAME(ADCDA )NOT AUTHORIZED TO ADMINISTER DIGITAL CERTIFICATES OR CERTIFICATE REQUESTS. READ DENIED
and
IKYI002I SAF Service IRRSPX00 Returned SAF RC = 8 RACF RC = 8 RACF RSN = 8 Request denied, not authorized.
The user issuing the request was not authorised to IRR.RPKISERV.PKIADMIN CLASS(FACILITY).
Note what the message says
- READ DENIED
- UPDATE DENIED
Use
tso rlist facility irr.RPKISERV.PKIADmin auth
and connect the userid ( if required) to a group or give the required access with
PERMIT IRR.RPKISERV.PKIADMIN CLASS(FACILITY)
ID(ADCDA ) ACCESS(read )setropts raclist(FACILITY) refresh
(163) EDC5163I SAF/RACF
extract error. (errno2 = 0x0BE8081C ): …
pthread_security_applid_np(__CREATE_SECURITY_ENV,
__CERTIFICATE_IDENTITY, 32, …, NULL, 0,… returned -1,
errno 163 errno2 be8081c 0x0be8081
The userid being used is revoked
IEW2646W 5383 ESD RMODE(24) CONFLICTS WITH USER-SPECIFIED RMODE(ANY) FOR SECTION …. CLASS B_TEXT.
IEW2646W 5383 ESD RMODE(24) CONFLICTS WITH USER-SPECIFIED RMODE(ANY) FOR SECTION … CLASS B_LIT.
I got these trying to bind a C program. I also had an assembler stub which caused this problem.
I added the RMODE and AMODE to my assembler program and cured the problem
CALLPRTF RMODE ANY
CALLPRTF AMODE ANY
CALLPRTF CSECT
ColinPaice 