PH05249: DFHXS1111 ISSUED AGAINST THE REGION USERID AFTER DFHXS1201 ISSUED FOR INVALID PASSWORD

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• An optimized web attach of a transaction is failing with a
  security violation against the region userid.  In this
  instance, transaction CWWU was being attached.  Transaction
  CWWU is a category 2 transaction so it is unexpected for a
  security check to occur for the region userid.
    The optimized web attach  processing is being used with basic
  authentication where the supplied userid and password
  combination is not valid.  This causes DFHWBXM to not set any
  user token and not set a deferred abend or message.  Thus, the
  transaction attach security check gets performed against the
  region userid.
     Following are the messages and return codes seen in this
  scenario:
  
  DFHXS1201 The password supplied in the verification request for
  userid (xxxxxxxx) was invalid. This  occurred in transaction
  CWWU when userid (regionuserid) was signed on at netname
  ????????.
  
  DFHXS1111 CWWU Security violation by user (regionuserid)  for
  resource CWWU in class TCICSTRN. SAF  codes are
  (X'00000008',X'00000000'). ESM codes are
  (X'00000008',X'00000000'). RACF request made was FASTAUTH.
  
  DFHAC2003  Security violation has been detected term id = ????,
  trans id = CWWU, userid = (regionuserid).
  
  
  
  Additional Symptom(s) Search Keyword(s): KIXREVDAM
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: The optimized web attach  processing is *
  *                      being used with basic authentication    *
  *                      and the supplied userid and/or password *
  *                      combination is not valid. In this case  *
  *                      DFHWBXM continues processing with an    *
  *                      invalid user token and uses the region  *
  *                      userid for the security check.          *
  ****************************************************************
  Web basic authentication uses the region userid when and invalid
  userid / password combination is received.
  

Problem conclusion

• DFHWBXM has been changed to prevent the error with the region
  User ID security check.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI61849 UI61850 UI61851

Modules/Macros

• DFHWBXM
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI61850

     UP19/03/15 P F903

• R100 PSY UI61849

     UP19/03/15 P F903

• R200 PSY UI61851

     UP19/03/19 P F903

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.