IBM Support

PK17945: DFHXS1203 USERID REVOKED MESSAGE POSSIBLE WHEN USERID IS NOT REV OKED.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In DFHXSSB, in order to test to see if a userid is revoked, CICS
    moves the 3-byte revoked date passed back by RACF to a 4-byte
    work area, and uses the extra high-order byte as a century
    indicator.  There are cases where RACF will pass back a revoked
    date of x'00000F', indicating that the userid is not revoked.
    When CICS moves that to a work field it becomes x'0100000F' with
    the x'01' at the front indicating the 21st Century.  When this
    work area is used in comparisons to see if the userid is
    revoked, CICS may incorrectly return a 'userid revoked' status
    to the caller.  The exception trace entry will look like the
    following:
    .
    XS FE04 XSSB  *EXC* FUNCTION(INQUIRE_PASSWORD_DATA)
                        RESPONSE(EXCEPTION) REASON(USERID_REVOKED)
                        SAF_RESPONSE(0) SAF_REASON(0)
                        ESM_RESPONSE(0) ESM_REASON(0)
    .
    If the problem on the customer's system is readily recreatable,
    an IF SLIP trap on DFHXSSB+x'BAE' (UK06431) can be used to
    validate that this is indeed the case.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All                                          *
    ****************************************************************
    * PROBLEM DESCRIPTION: Message DFHXS1203 is issued against     *
    *                      a transaction request for a userid      *
    *                      which is not revoked.                   *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    DFHXSSB tests the revoke date of a userid by extracting
    the date from the external security manager, generating a
    century flag and testing the resultant 4 byte field.
    In certain instances the external security manager can
    return a null data value of 000000, 00000C, 00000D, 00000F
    or FFFFFF. DFHXSSB incorrectly processes this data as a
    valid revoke date which will cause message DFHXS1203 The
    userid supplied in the verification request userid uuuuuu
    is revoked. This occurred in transaction tttt when userid
    uuuuuuuu was signed on at netname nnnnnnnn.
    
    Additional Keywords: MSGDFHXS1203
    

Problem conclusion

  • DFHXSSB has been changed to handle values of 000000,
    00000C, 00000D, 00000F and FFFFFF as valid null dates.
    This will prevent message DFHXS1203 being issued.
    

Temporary fix

  • FIX AVAILABLE BY PTF ONLY
    

Comments

APAR Information

  • APAR number

    PK17945

  • Reported component name

    CICSTS 3.1 Z/OS

  • Reported component ID

    5655M1500

  • Reported release

    400

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / Pervasive

  • Submitted date

    2006-01-16

  • Closed date

    2006-06-09

  • Last modified date

    2006-07-05

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UK15320

Modules/Macros

  •    DESXSSB  DFHXSSB
    

Fix information

  • Fixed component name

    CICSTS 3.1 Z/OS

  • Fixed component ID

    5655M1500

Applicable component levels

  • R400 PSY UK15320

       UP06/06/14 P F606

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.1","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.1","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
05 July 2006