A fix is available
APAR status
Closed as program error.
Error description
In DFHXSSB, in order to test to see if a userid is revoked, CICS moves the 3-byte revoked date passed back by RACF to a 4-byte work area, and uses the extra high-order byte as a century indicator. There are cases where RACF will pass back a revoked date of x'00000F', indicating that the userid is not revoked. When CICS moves that to a work field it becomes x'0100000F' with the x'01' at the front indicating the 21st Century. When this work area is used in comparisons to see if the userid is revoked, CICS may incorrectly return a 'userid revoked' status to the caller. The exception trace entry will look like the following: . XS FE04 XSSB *EXC* FUNCTION(INQUIRE_PASSWORD_DATA) RESPONSE(EXCEPTION) REASON(USERID_REVOKED) SAF_RESPONSE(0) SAF_REASON(0) ESM_RESPONSE(0) ESM_REASON(0) . If the problem on the customer's system is readily recreatable, an IF SLIP trap on DFHXSSB+x'BAE' (UK06431) can be used to validate that this is indeed the case.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All * **************************************************************** * PROBLEM DESCRIPTION: Message DFHXS1203 is issued against * * a transaction request for a userid * * which is not revoked. * **************************************************************** * RECOMMENDATION: * **************************************************************** DFHXSSB tests the revoke date of a userid by extracting the date from the external security manager, generating a century flag and testing the resultant 4 byte field. In certain instances the external security manager can return a null data value of 000000, 00000C, 00000D, 00000F or FFFFFF. DFHXSSB incorrectly processes this data as a valid revoke date which will cause message DFHXS1203 The userid supplied in the verification request userid uuuuuu is revoked. This occurred in transaction tttt when userid uuuuuuuu was signed on at netname nnnnnnnn. Additional Keywords: MSGDFHXS1203
Problem conclusion
DFHXSSB has been changed to handle values of 000000, 00000C, 00000D, 00000F and FFFFFF as valid null dates. This will prevent message DFHXS1203 being issued.
Temporary fix
FIX AVAILABLE BY PTF ONLY
Comments
APAR Information
APAR number
PK17945
Reported component name
CICSTS 3.1 Z/OS
Reported component ID
5655M1500
Reported release
400
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
YesSpecatt / Pervasive
Submitted date
2006-01-16
Closed date
2006-06-09
Last modified date
2006-07-05
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UK15320
Modules/Macros
DESXSSB DFHXSSB
Fix information
Fixed component name
CICSTS 3.1 Z/OS
Fixed component ID
5655M1500
Applicable component levels
R400 PSY UK15320
UP06/06/14 P F606
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.1","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.1","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
05 July 2006