IBM i Global

 View Only

  • 1.  System debugger getting communications error when starting debug server

    Posted Tue October 04, 2022 10:31 AM

    When I'm on a 5250 session I can use strDbg and strSrvJob command. I want to start using the system debugger but I get errors when starting the debug server. See screenshot.

    system debugger showing comm error when starting debug server
    When I check the job documented at the top of the display ( wrkjob 044321/quser/qzdasoinit ) I don't see any error messages.
    Network problem? ...do I need certain ports open. Authority problem?


    ------------------------------
    Patrick Conner
    ------------------------------


  • 2.  RE: System debugger getting communications error when starting debug server

    Posted Tue October 04, 2022 10:35 AM
    I forgot to mention that this post started in the SQL group and Satid already responded with the following info:
    Dear Patrick

    I Google with "ibm i graphical debugger strdbg" and find this IBM i Technote that may help with your problem : Authorities Requried for Debugging Using the Graphical (GUI) Debugger

    This document provides the authorities required for debugging using the graphical or GUI debugger.

    Authorities Required for Debugging

    The user profile that you use to sign on to an iSeries system in the workbench iSeries logon dialog must have the following authorities:

    o *USE authority to the Start Debug (STRDBG) command.
    o *USE authority to the End Debug (ENDDBG) command.
    o *USE authority to the Start Service Job (STRSRVJOB) command.
    o *USE authority to the End Service Job (ENDSRVJOB) command.
    o Either *CHANGE authority to the program or Java class being debugged, or *USE authority to the program being debugged and *SERVICE special authority.

    If the job that you are debugging is running under a different user profile than the user profile you use to sign on to the iSeries system from the debugger, the user profile that you use to sign on to the iSeries system from the debugger must have the following authorities: 

    o *USE authority to the user profile that the job you are debugging is running under.
    o *JOBCTL special authority if you do not explicitly use fully qualified program names (library/program). In other words, if you use *CURLIB or *LIBL or you do not specify a library name, you need to have *JOBCTL special authority.

    The group profile QPGMR gives you the correct authority to the STRDBG, ENDDBG, STRSRVJOB, and ENDSRVJOB commands and *JOBCTL special authority.

    I also find a 13-minute video on IBM i GUI Debugger on Youtube. Not sure if it will be useful for you or not.

    ------------------------------
    Patrick Conner
    ------------------------------

    Original Message


  • 3.  RE: System debugger getting communications error when starting debug server

    Posted Tue October 04, 2022 11:01 AM

    Satid,
    The video was helpful. I think I found the problem.

    Not authorized to start debug server
    We're going through a security hardening project and evidently I've lost some authority.


    ------------------------------
    Patrick Conner
    ------------------------------

    Original Message


  • 4.  RE: System debugger getting communications error when starting debug server
    Best Answer

    Posted Wed October 05, 2022 01:43 AM
    Hi Patrick.

    The debug TCP server *DBG is the service handling debug requests from clients. This service should not be started by the developer, but should be controlled by the system administrator and started by request or as part of the IPL proces.

    The STRTCPSVR command can start other services than the debug server, so it should be under full security and not allow any users using this to start a service, i.e. opening a door into the system.

    So your security hardening project is on the right track - just need to think about the availability of the debug server... :-)

    Best regards,
    Christian

    ------------------------------
    Christian Jorgensen
    IT System Administrator
    Network of Music Partners A/S
    ------------------------------

    Original Message


  • 5.  RE: System debugger getting communications error when starting debug server

    Posted Wed October 05, 2022 03:23 AM
    I complitely agree with Christian.

    ------------------------------
    Best Regards
    CADARIO SIMONE
    IT Specialist
    Kyndryl Italia Innovation Services s.r.l.
    ------------------------------

    Original Message