IBM Support

PI74786: DFHXS1201 THE PASSWORD SUPPLIED IN THE VERIFICATION REQUEST FOR USERID XX WAS INVALID IS IMPROPERLY ISSUED 17/01/19 PTF PECHANGE

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • After migration from CICS TS 42, without the support of the
    Enhanced Password Algorithm (RACF APAR OA43999) to CICS TS V52,
    the passticket decoding is not working properly and result in
    the message:
    DFHXS1201 THE PASSWORD SUPPLIED IN THE VERIFICATION REQUEST FOR
    USERID aaaaaa WAS INVALID. THIS OCCURRED IN TRANSACTION tttt
    WHEN USERID user WAS SIGNED ON AT NETNAME nnnn
    .
    Customer is using GROUPID as part of the passticket decoding and
    the VERIFYX call introduced by the support of the Enhanced
    Password Algorithm is not containing the GROUPID.
    

Local fix

  • n/a
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All CICS Users with PI21865 Applid.          *
    ****************************************************************
    * PROBLEM DESCRIPTION: EXEC CICS SIGNON may fail when using    *
    *                      passtickets.                            *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    When an application creates a passticket using userid, applid
    and groupid an EXEC CICS SIGNON USERID(u) PASSWORD(passticket)
    GROUPID(g) is issued. CICS verifies the password without passing
    the GROUPID parameter to the ESM and so the validate of the
    passticket fails.
    

Problem conclusion

  • UI22614 UI25260 UI31713
    DFHXSSB, DFHXSPW and DFHUSAD have been changed to allow
    passtickets to be verified using GROUPID.
    

Temporary fix

  •             *********
                * HIPER *
                *********
    FIX AVAILABLE BY PTF ONLY
    

Comments

APAR Information

  • APAR number

    PI74786

  • Reported component name

    CICS TS Z/OS V4

  • Reported component ID

    5655S9700

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    YesPE

  • HIPER

    YesHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-01-11

  • Closed date

    2017-01-26

  • Last modified date

    2017-03-02

  • APAR is sysrouted FROM one or more of the following:

    PI70500

  • APAR is sysrouted TO one or more of the following:

    UI44249 UI44250

Modules/Macros

  •    DFHESN   DFHIIRS  DFHISXS  DFHPITC  DFHSOSE
    DFHSZREQ DFHUSAD  DFHWBSR  DFHWBXN  DFHXSAD  DFHXSDM  DFHXSFL
    DFHXSIS  DFHXSLU  DFHXSPW  DFHXSPWT DFHXSRC  DFHXSSA  DFHXSSB
    DFHXSSBT DFHXSTRI EYU0VBPC
    

Fix information

  • Fixed component name

    CICS TS Z/OS V4

  • Fixed component ID

    5655S9700

Applicable component levels

  • R70M PSY UI44250

       UP17/02/02 P F702 «

  • R700 PSY UI44249

       UP17/02/02 P F702 «

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.2","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.2","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
02 March 2017