A fix is available
APAR status
Closed as program error.
Error description
During ADD_USER_WITH_PASSWORD processing, DFHUSAD calls DFHXSSA to invoke RACF for a RACROUTE REQUEST=VERIFY, ENVIR=CREATE, The customer has code running at RACF exit ICHRIX01. The exit code is driven and decides to fail the call. The exit code tells RACF to fail the call and RACF returns to CICS with SAF_RESPONSE(8) SAF_REASON(0) and ESM_RESPONSE(18) ESM_REASON(0) to indicate the call was failed by the installation exit routine. DFHXSSA does not expect this combination of return code and raises and exception for UNKNOWN_ESM_RESPONSE. This is percolated back up to DFHUSAD who issues message DFHUS0002 and causes a system dump to be produced. DFHUS0002 A severe error (code X'0309') has occurred in module DFHUSAD. DFHXSSA needs to be updated to understand and handle the response and reason codes more gracefully. Additional Symptom(s) Search Keyword(s): KIXREVRER MSGDFHUS0002 verify_password
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users * **************************************************************** * PROBLEM DESCRIPTION: The message IRR016I VERIFICATION FAILED * * BY RACF INSTALLATION EXIT is followed * * by message DFHUS0002 applid A severe * * error (code X'0309') has occurred in * * module DFHUSAD. * **************************************************************** * RECOMMENDATION: * **************************************************************** A transaction issues an EXEC CICS VERIFY PASSWORD() USERID() command or an EXEC CICS VERIFY PHRASE() USERID() command for which CICS issues a RACROUTE REQUEST=VERIFY(X) request. The request is failed by RACF exit ICHRIX01 with RC=4. This is returned to the CICS security domain as SAF_RESPONSE=8x, ESM_RESPONSE=18x and ESM_REASON=00x which it does not expect. The result is an UNKNOWN_ESM_RESPONSE and a severe error (code X'0309') in module DFHUSAD and an SVC dump with dump code US0002. The transaction is abended with abend code AEXZ. Additional keywords: IRR016I msgIRR016I DFHUS0002 msgDFHUS0002 AEXZ abendAEXZ
Problem conclusion
The module DFHXSSA and DFHXSSB have been changed for a RACROUTE REQUEST=VERIFY(X) request to expect SAF_RESPONSE=8x, ESM_RESPONSE=18x and ESM_REASON=00x. In this case an EXEC CICS VERIFY PASSWORD() USERID() command is returned RESP=NOTAUTH, RESP2=2, ESM_RESP=18 and ESM_REASON=0. The CICS TS Application Programming Reference manual is updated for VERIFY PASSWORD and for VERIFY PHRASE to explain the condition NOTAUTH for ESM_RESPONSE = 18x (decimal 24). VERIFY PASSWORD --------------- Conditions 70 NOTAUTH RESP2 values: 2 The supplied password is wrong. If the external security manager is RACF, the revoke count maintained by RACF is incremented. However, if ESM RESP = 24 the revoke count is not incremented. 3 A new password is required. 19 The user ID is revoked. 20 The user's connection to their default group has been revoked. ESM RESP values: 24 The RACROUTE REQUEST=VERIFY(X) was failed by an ICHRIX01 installation exit routine. Default action: terminate the task abnormally. VERIFY PHRASE ------------- Conditions 70 NOTAUTH RESP2 values: 2 The supplied password or password phrase is wrong. If the external security manager is RACF , the revoke count maintained by RACF is incremented. However, if ESM RESP = 24 the revoke count is not incremented. 3 A new password or password phrase is required. 19 The user ID is revoked. 20 The user's connection to their default group has been revoked. ESM RESP values: 24 The RACROUTE REQUEST=VERIFY(X) was failed by an ICHRIX01 installation exit routine. Default action: terminate the task abnormally.
Temporary fix
FIX AVAILABLE BY PTF ONLY
Comments
APAR Information
APAR number
PI51216
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
800
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2015-10-26
Closed date
2016-06-14
Last modified date
2016-07-04
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
PI61629 PI61666 UI38869 UI38870
Modules/Macros
DFHUSAD DFHXSSA DFHXSSB
SC34284500 | SC34726700 |
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
04 July 2016