Re: [Ftpapi] gsk_environment_init returns 6003

[Scott Klement <sk@xxxxxxxxxxxxxxxx>]

Hi Jonathan,

gsk_environment_init is an IBM-provided function, documented here: https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_74/apis/gsk_environment_init.htm

The documentation clearly states that it requires *R access to the certificate store file, and *X to each directory in the path name.  If this is working differently for you (I have not heard of the problem, myself) I would suggest reporting it to IBM.

I do not have the ability to troubleshoot or fix the internals of the operating system.

-SK

On 7/21/2020 7:19 PM, Ball, Jonathan wrote:

The user has no authority to the last element of the server store path:

/qibm/userdata/ICSS/Cert/Server

 

The user also lacks authority to the key files:
DEFAULT.KDB

DEFAULT.RDB

 

Public has *EXCLUDE to the Server directory and to the two files; has *RX for the rest of the path.

 

The strange thing is the permissions on the path elements and on the files are exactly the same on another system, and the user is able to complete the function.  The user has no elevated privileges group profile on either system, and is not one of the user profiles registered for QIBM_QSY_SYSTEM_CERT_STORE.

 

It seems to me the gsk_environment_init should fail for the user on both systems. 

 

Any help or advice appreciated.

-- 
_______________________________________________
Ftpapi mailing list
Ftpapi@xxxxxxxxxxxxxxxxxxxxxx
http://scottklement.com/mailman/listinfo/ftpapi