PK79838: MSGDFHWB0002 SEVERE ERROR X'0506' IN DFHWBSR FOR AUTHORIZATION ERROR AND DUMP PRODUCED.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• You can see in the trace that every request submitted by a
  userid gets rejected.  Most of these are running a new task
  and the message DFHWB0360 gets issued.  In the case of the
  FAVICON request, a static response gets sent back from CWXN
  without attaching a new task. The authorization failure then
  results in message, "DFHWB0002 Severe error code x'0506' in
  DFHWBSR" and a dump.  CICS will be modified so this type of
  failure will not result in a dump.
  Additional Symptom(s) Search Keyword(s):
  KIXREVCEW
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: MSGDFHWB0002 Severe Error X'0506' in    *
  *                      DFHWBSR for authorization               *
  *                      error and dump produced.                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  A TCPIPSERVICE is defined with Authenticate: Basic. The user at
  the browser submits a request to CICS and supplies a valid
  userid and password.
  However the user is not authorized to use this APPLID, so when
  CWXN does an ADD_USER_WITHOUT_PASSWORD call, this fails with an
  APPLID_NOTAUTH response resulting in a DFHWB0002 message. The
  severe error message DFHWB0002 and system dump are not
  appropriate for this straightforward authorization error.
  

Problem conclusion

• DFHWBSR has been changed in routine
  Build_authorization_environment, for the APPLID_NOTAUTH reason,
  so that a new message DFHWB0364 will be issued in place of the
  previous DFHWB0002 message and system dump.
  
  The CICS Transaction Server for z/OS CICS Messages and Codes
  Version 3 Release 2 manual (GC34-6827-01) will be updated as
  follows:
  A new message DFHWB0364 will be added in Chapter 1 "DFH
  messages" under section "DFHWBxxxx" after message DFHWB0363.
  The message will read:
  
  DFHWB0364  DATE TIME APPLID  AN ATTEMPT TO
            ESTABLISH SECURITY FOR USERID  USERID  HAS
            FAILED. THE REQUESTED STATIC RESPONSE CANNOT BE
            RETURNED.  SAF CODES ARE
            ( X'SAFRESP' , X'SAFREAS' ). ESM CODES ARE
            ( X'ESMRESP' , X'ESMREAS' ). HOST IP
            ADDRESS:  HOSTADDR . CLIENT IP ADDRESS:
             CLIENTADDR . TCPIPSERVICE:
             TCPIPSERVICE .
  
  EXPLANATION:  An attempt was made to establish security
  for userid  userid  but it was rejected by the external
  security manager (ESM).
  
  In order to return the requested static response CICS Web
  processing requires security to be established for userid
   userid .
  
  SYSTEM ACTION:  Security has not been established for the
  userid.  The requested static response cannot be returned.
  
  USER RESPONSE:  The response and reason codes
  ( safresp  and  safreas ) returned by the system
  authorization facility (SAF), and the response and reason
  codes ( esmresp  and  esmreas ) returned by the
  external security manager (ESM) are those issued by the
  RACROUTE REQUEST=VERIFY or RACROUTE REQUEST=EXTRACT macros.
  These return codes are described in the  z/OS MVS Programming:
  Authorized Assembler Services Guide", and in "External Security
  Interface (RACROUTE) Macro Reference for MVS .
  
  There may be further messages produced by CICS or the
  external security manager (ESM) which provide more
  information.
  
  DESTINATION:  CWBO
  
  MODULE:  DFHWBSR
  
  XMEOUT PARAMETERS: date, time, applid,
  userid, X'safresp', X'safreas',
  X'esmresp', X'esmreas', hostaddr,
  clientaddr, tcpipservice
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK46725 PK88764

Modules/Macros

•    DESWBAP  DESWBDM  DESWBRQ  DESWBRQF DESWBSR
  DESWBXM  DFHMEWBC DFHMEWBE DFHMEWBK DFHWBAP  DFHWBAPA DFHWBAPF
  DFHWBAPJ DFHWBAPM DFHWBAPT DFHWBAPV DFHWBDM  DFHWBRQD DFHWBRQS
  DFHWBSR  DFHWBSRA DFHWBSRM DFHWBSRT DFHWBXM  DFHWBXMA DFHWBXMT
  DFH79838
  

Fix information

• Fixed component name

  CICSTS V3 Z/OS

• Fixed component ID

  5655M1500

Applicable component levels

• R500 PSY UK46725

     UP09/05/21 P F905

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.