IBM Support

PI48562: CICS AUTHORIZATIONS TO DB2 TABLES FAIL WHEN USING ESM TO CHANGE GROUP ACCESS.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • We are using CA Top Secret Security 15  z/OS. We use TSS
    IBMGROUPs for DB2 authorizations. We authorize a user for
    an IBMGROUP through a profile but the access to authorized
    DB2 tables fails under CICS only.
    

Local fix

  • CEMT SET DB2CONN SECURITY(REBUILD)
    resolves the issue.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All CICS users                               *
    ****************************************************************
    * PROBLEM DESCRIPTION: RACFSYNC SIT parameter enhancement.     *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The RACFSYNC system initialisation parameter currently supports
    options of YES or NO. YES will cause cached user tokens to be
    invalidated and force a full RACROUTE VERIFY on subsequent
    requests, but not force existing DB2 threads to sign on again
    at the time of the next thread use.
    

Problem conclusion

  • The CICS Parameter Manager, User Manager and DB2 attach facility
    will be updated to provide a new RACFSYNC option. This is called
    RACFDB2SYNC. If this is specified then when CICS detects ENF 71
    signals it will make existing DB2 threads sign on again when the
    thread is next used, as well as invalidating cached user tokens.
      The CICS TS 5.1 Data Areas manual (GC34-2849-00) will be
    updated in table 491, page 621, as follows. Byte F5 will be
    redefined to include a definition for a new x10 bit:
    '(F5) ...1 ....    SITENFDB     RACFDB2SYNC Listen enf 71
     (F5) .... 1111    *            Reserved'
    
      The CICS TS 5.1 System Definition Guide (SC34-2871-00) will
    be updated as follows. The definition for RACFSYNC on chapter
    33, page 230, will be amended to include new option
    RACFDB2SYNC:
    'RACFSYNC= YES NO RACFDB2SYNC}
               ---
    .
    RACFDB2SYNC    CICS listens for type 71 ENF events. In addition
                   to the function provided by specifying YES, CICS
                   will also make DB2 threads for the associated
                   userid issue a full signon when they are next
                   reused.'
    .
      The CICS TS 5.2 Data Areas manual (GC34-7271-00) will be
    updated in table 498, page 634, as follows. Byte F5 will be
    redefined to include a definition for a new x10 bit:
    '(F5) ...1 ....    SITENFDB     RACFDB2SYNC Listen enf 71
     (F5) .... 1111    *            Reserved'
    
      The CICS TS 5.2 System Definition Guide (SC34-7293-00) will
    be updated as follows. The definition for RACFSYNC on chapter
    33, page 231, will be amended to include new option
    RACFDB2SYNC:
    'RACFSYNC= YES NO RACFDB2SYNC}
               ---
    .
    RACFDB2SYNC    CICS listens for type 71 ENF events. In addition
                   to the function provided by specifying YES, CICS
                   will also make DB2 threads for the associated
                   userid issue a full signon when they are next
                   reused.'
    

Temporary fix

  • FIX AVAILABLE BY PTF ONLY
    

Comments

APAR Information

  • APAR number

    PI48562

  • Reported component name

    CICS TS Z/OS V5

  • Reported component ID

    5655Y0400

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function

  • Submitted date

    2015-09-11

  • Closed date

    2015-10-15

  • Last modified date

    2015-11-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI32065 UI32066

Modules/Macros

  • DFHD2D2  DFHD2TM  DFHD2TMT DFHPADUF DFHPAGP  DFHPAIN  DFHPASY
    DFHSIT   DFHUSDUF DFHUSES  DFHUSIS  DFHUSIST
    

Publications Referenced
GC34284900SC34287100GC34727100SC34729300 

Fix information

  • Fixed component name

    CICS TS Z/OS V5

  • Fixed component ID

    5655Y0400

Applicable component levels

  • R800 PSY UI32065

       UP15/10/23 P F510

  • R900 PSY UI32066

       UP15/10/23 P F510

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
03 November 2015