A fix is available
APAR status
Closed as program error.
Error description
An EXEC SIGNON with OIDCARD and no password is being issued. It fails with NOTAUTH and the following messages are issued: ICH408I USER(userid) GROUP(group-name) NAME(user-name) LOGON/JOB INITIATION - INVALID PASSWORD IRR013I VERIFICATION FAILED. INVALID PASSWORD GIVEN. DFHXS1201 DATE TIME APPLID The password supplied in the verification request for userid USERID was invalid. This occurred in transaction TRANID when userid USERID was signed on at netname NETNAME. Following trace entries can be seen when reviewing a dump of the region: QR AP 00E1 EIP ENTRY SIGNON QR AP 2040 SNUS ENTRY SIGNON_TERMINAL_USER QR AP 2080 SNTU ENTRY SIGNON_TERMINAL_USER QR US 0301 USAD ENTRY ADD_USER_WITH_PASSWORD QR XS 0601 XSPW ENTRY INQUIRE_PASSWORD_DATA L8000 XS FE01 XSSB ENTRY INQUIRE_PASSWORD_DATA L8000 XS FE04 XSSB *EXC* INQUIRE_PASSWORD_DATA/EXCEPTION INVALID_PASSWORD Additional Symptom(s) Search Keyword(s): KIXREVxxx signon OIDCARD password invalid ICH408I IRR013I DFHXS1201 INVALID_PASSWORD
Local fix
No
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users with PI21866 applied. * **************************************************************** * PROBLEM DESCRIPTION: EXEC CICS SIGNON with OIDCARD and no * * PASSWORD gets invalid password * * response. * **************************************************************** * RECOMMENDATION: * **************************************************************** An EXEC CICS SIGNON with OIDCARD and no PASSWORD is being issued. It is processed in DFHUSAD including validating the password and adding the user to the user domain. DFHUSAD doesn't check whether a password has actually been supplied before trying to validate it. The password validation process is failed as no password is provided. It correspondingly causes the SIGNON request to fail with NOTAUTH response.
Problem conclusion
UI24130 UI24127 UI25263 UI22616 UI25262 UI22618 DFHUSAD has been changed to make sure the SIGNON with OIDCARD and no PASSWORD can be correctly processed.
Temporary fix
********* * HIPER * ********* FIX AVAILABLE BY PTF ONLY
Comments
APAR Information
APAR number
PI44336
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
900
Status
CLOSED PER
PE
YesPE
HIPER
YesHIPER
Special Attention
NoSpecatt
Submitted date
2015-07-06
Closed date
2015-10-02
Last modified date
2015-11-03
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
PI44380 UI31716 UI31717
Modules/Macros
DFHUSAD
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.2","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.2","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
03 November 2015