IBM Support

PI51216: DFHUS0002(CODE X'0309') PRODUCED DURING VERIFY PASSWORD COMMAND

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • During ADD_USER_WITH_PASSWORD processing, DFHUSAD calls
    DFHXSSA to invoke RACF for a
    RACROUTE REQUEST=VERIFY,
               ENVIR=CREATE,
    
    The customer has code running at RACF exit ICHRIX01. The exit
    code is driven and decides to fail the call. The exit code
    tells RACF to fail the call and RACF returns to CICS with
    SAF_RESPONSE(8) SAF_REASON(0) and ESM_RESPONSE(18)
    ESM_REASON(0) to indicate the call was failed by the
    installation exit routine.
    
    DFHXSSA does not expect this combination of return code and
    raises and exception for UNKNOWN_ESM_RESPONSE.  This is
    percolated back up to DFHUSAD who issues message DFHUS0002 and
    causes a system dump to be produced.
    
    DFHUS0002  A severe error (code X'0309') has occurred in module
               DFHUSAD.
    
    DFHXSSA needs to be updated to understand and handle the
    response and reason codes more gracefully.
    
    Additional Symptom(s) Search Keyword(s): KIXREVRER
    MSGDFHUS0002 verify_password
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All CICS users                               *
    ****************************************************************
    * PROBLEM DESCRIPTION: The message IRR016I VERIFICATION FAILED *
    *                      BY RACF INSTALLATION EXIT is followed   *
    *                      by message DFHUS0002 applid A severe    *
    *                      error (code X'0309') has occurred in    *
    *                      module DFHUSAD.                         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    A transaction issues an EXEC CICS VERIFY PASSWORD() USERID()
    command or an EXEC CICS VERIFY PHRASE() USERID() command for
    which CICS issues a RACROUTE REQUEST=VERIFY(X) request.
    The request is failed by RACF exit ICHRIX01 with RC=4.
    This is returned to the CICS security domain as SAF_RESPONSE=8x,
    ESM_RESPONSE=18x and ESM_REASON=00x which it does not expect.
    The result is an UNKNOWN_ESM_RESPONSE and a severe error
    (code X'0309') in module DFHUSAD and an SVC dump with dump code
    US0002.  The transaction is abended with abend code AEXZ.
    
    Additional keywords:
    IRR016I msgIRR016I DFHUS0002 msgDFHUS0002 AEXZ abendAEXZ
    

Problem conclusion

  • The module DFHXSSA and DFHXSSB have been changed for a RACROUTE
    REQUEST=VERIFY(X) request to expect SAF_RESPONSE=8x,
    ESM_RESPONSE=18x and ESM_REASON=00x.
    In this case an EXEC CICS VERIFY PASSWORD() USERID() command
    is returned RESP=NOTAUTH, RESP2=2, ESM_RESP=18 and ESM_REASON=0.
    
    The CICS TS Application Programming Reference manual is updated
    for VERIFY PASSWORD and for VERIFY PHRASE to explain the
    condition NOTAUTH for ESM_RESPONSE = 18x (decimal 24).
    
    VERIFY PASSWORD
    ---------------
    Conditions
    
    70 NOTAUTH
      RESP2 values:
         2 The supplied password is wrong. If the external security
           manager is RACF, the revoke count maintained by RACF is
           incremented.  However, if ESM RESP = 24 the revoke count
           is not incremented.
         3 A new password is required.
        19 The user ID is revoked.
        20 The user's connection to their default group has been
           revoked.
    
      ESM RESP values:
        24 The RACROUTE REQUEST=VERIFY(X) was failed by an ICHRIX01
           installation exit routine.
      Default action: terminate the task abnormally.
    
    VERIFY PHRASE
    -------------
    Conditions
    
    70 NOTAUTH
      RESP2 values:
         2 The supplied password or password phrase is wrong.
           If the external security manager is RACF , the revoke
           count maintained by RACF is incremented.  However, if
           ESM RESP = 24 the revoke count is not incremented.
         3 A new password or password phrase is required.
        19 The user ID is revoked.
        20 The user's connection to their default group has been
           revoked.
      ESM RESP values:
        24 The RACROUTE REQUEST=VERIFY(X) was failed by an ICHRIX01
           installation exit routine.
      Default action: terminate the task abnormally.
    

Temporary fix

  • FIX AVAILABLE BY PTF ONLY
    

Comments

APAR Information

  • APAR number

    PI51216

  • Reported component name

    CICS TS Z/OS V5

  • Reported component ID

    5655Y0400

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-10-26

  • Closed date

    2016-06-14

  • Last modified date

    2016-07-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    PI61629 PI61666 UI38869 UI38870

Modules/Macros

  • DFHUSAD  DFHXSSA  DFHXSSB
    

Publications Referenced
SC34284500SC34726700   

Fix information

  • Fixed component name

    CICS TS Z/OS V5

  • Fixed component ID

    5655Y0400

Applicable component levels

  • R800 PSY UI38869

       UP16/07/01 P F606

  • R900 PSY UI38870

       UP16/07/01 P F606

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.1","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
04 July 2016