A fix is available
APAR status
Closed as program error.
Error description
We are using CA Top Secret Security 15 z/OS. We use TSS IBMGROUPs for DB2 authorizations. We authorize a user for an IBMGROUP through a profile but the access to authorized DB2 tables fails under CICS only.
Local fix
CEMT SET DB2CONN SECURITY(REBUILD) resolves the issue.
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users * **************************************************************** * PROBLEM DESCRIPTION: RACFSYNC SIT parameter enhancement. * **************************************************************** * RECOMMENDATION: * **************************************************************** The RACFSYNC system initialisation parameter currently supports options of YES or NO. YES will cause cached user tokens to be invalidated and force a full RACROUTE VERIFY on subsequent requests, but not force existing DB2 threads to sign on again at the time of the next thread use.
Problem conclusion
The CICS Parameter Manager, User Manager and DB2 attach facility will be updated to provide a new RACFSYNC option. This is called RACFDB2SYNC. If this is specified then when CICS detects ENF 71 signals it will make existing DB2 threads sign on again when the thread is next used, as well as invalidating cached user tokens. The CICS TS 5.1 Data Areas manual (GC34-2849-00) will be updated in table 491, page 621, as follows. Byte F5 will be redefined to include a definition for a new x10 bit: '(F5) ...1 .... SITENFDB RACFDB2SYNC Listen enf 71 (F5) .... 1111 * Reserved' The CICS TS 5.1 System Definition Guide (SC34-2871-00) will be updated as follows. The definition for RACFSYNC on chapter 33, page 230, will be amended to include new option RACFDB2SYNC: 'RACFSYNC= YES NO RACFDB2SYNC} --- . RACFDB2SYNC CICS listens for type 71 ENF events. In addition to the function provided by specifying YES, CICS will also make DB2 threads for the associated userid issue a full signon when they are next reused.' . The CICS TS 5.2 Data Areas manual (GC34-7271-00) will be updated in table 498, page 634, as follows. Byte F5 will be redefined to include a definition for a new x10 bit: '(F5) ...1 .... SITENFDB RACFDB2SYNC Listen enf 71 (F5) .... 1111 * Reserved' The CICS TS 5.2 System Definition Guide (SC34-7293-00) will be updated as follows. The definition for RACFSYNC on chapter 33, page 231, will be amended to include new option RACFDB2SYNC: 'RACFSYNC= YES NO RACFDB2SYNC} --- . RACFDB2SYNC CICS listens for type 71 ENF events. In addition to the function provided by specifying YES, CICS will also make DB2 threads for the associated userid issue a full signon when they are next reused.'
Temporary fix
FIX AVAILABLE BY PTF ONLY
Comments
APAR Information
APAR number
PI48562
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
800
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
YesSpecatt / New Function
Submitted date
2015-09-11
Closed date
2015-10-15
Last modified date
2015-11-03
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI32065 UI32066
Modules/Macros
DFHD2D2 DFHD2TM DFHD2TMT DFHPADUF DFHPAGP DFHPAIN DFHPASY DFHSIT DFHUSDUF DFHUSES DFHUSIS DFHUSIST
GC34284900 | SC34287100 | GC34727100 | SC34729300 |
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
03 November 2015