PK16414: DURING INITIALIZATION MESSAGES ARE RECEIVED FOR A R_KERBINFO CALL USING KERBEROS FOR TCPIPSERVICE AUTHENTICATION.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• During initialization, messages are received indicating an
  R_kerbinfo call like these:
    CAS2205I REQUEST=R_kerbinfo      ,EXIT=PRE ,RC=N/A
    CAS2206I USER=CICT   ,UID=48555   ,GROUP=*  ,GID=1999999999
  .
    CAS2206I Function=1   ,MF userid=CICT
    CAS2205I REQUEST=R_kerbinfo      ,EXIT=POST,RC=8/8:24
     The R_kerbinfo call is issued using Kerberos for TCPIPSERVICE
  authentication.
     The minimum length of the data_area structure passed in to
  the service for the retrieval function codes for the R_kerbinfo
  (IRRSMK00) callable service used to be 662 bytes long + a 2
  bytes length field. This data_area structure defined in DFHXSSI
  has a field name of R_kerbinfo_response and is 664 bytes long.
  At some point in time this structure was increased from 662 to
  682 by the SecureWay Security Server RACF Callable Services.
  This means that R_kerbinfo_response should now be 684 bytes
  long.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: External security manager logs error    *
  *                      message during CICS initialization.     *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  During CICS initialization, DFHXSSI makes a service call to RACF
  module IRRSMK00 to extract the kerberos principal name
  associated with the CICS region USERID. CICS passes a 664 byte
  data area to hold the response from this call. From z/OS 1.2
  onwards, the minimum length required was raised to 684 bytes and
  the call returns an error. This error is tolerated by CICS but
  in the case reported, the external security manager logged the
  error every time CICS was started.
  

Problem conclusion

• DFHXSSI has been changed to pass a 1024 byte data area on the
  call to IRRSMK00.
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PK10935

• APAR is sysrouted TO one or more of the following:

  UK10156

Modules/Macros

•    DESXSSI  DFHXSSI
  

Fix information

• Fixed component name

  CICSTS 3.1 Z/OS

• Fixed component ID

  5655M1500

Applicable component levels

• R400 PSY UK10156

     UP05/12/20 P F512

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.