PM38418: ACTIVE USERID FOR IPIC TASK SUDDENLY BECOMES THE REGION USERID 11/05/05 PTF PECHANGE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• A request is received on an IPCONN defined with
  USERAUTH=IDENTIFY the correct userid is passed in. The IPIC task
  gets attached with the correct userid information as expected.
  However, the application later issues an EXEC CICS ASSIGN USERID
  command and the region userid is is passed back as the response
  instead of the expected active userid.
  The ASSIGN command causes DFHUSXM to issue an
  INQUIRE_TRANSACTION_USER call to be made to the Transaction
  Manager domain which preserves a User Domain transaction token
  . In this scenario, this token has not been set up and contains
  zeros. DFHUSXM substitutes the region userid when a zero token
  is passed back which explains why the ASSIGN USERID command
  returns the region userid instead of the real active userid.
    The User Domain transaction token has not been properly set
  up within the Transaction Manager domain because of code in
  DFHISXM that sets xmac_set_user_token = no  if flag
  initialize_receiver_error is on upon return from
  initialize_receiver processing made by DFHIXSM. Because the flag
  is never initialized to off, it can randomly be turned on as
  part of DFHISXM stack storage.
  .
  Additional keyword(s): primary_client_init primary client init
  set_user_token set user token   init_transaction_user
  init transaction user   usxm_usdom_transaction_token
  usxm usdom transaction token   usxt_transaction_token
  usxt transaction token
  usdom_transaction_token   usdom transaction token
  DFHEIQSK XM_USERID
  KIXREVSCB
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users with PM27171 applied.              *
  ****************************************************************
  * PROBLEM DESCRIPTION: IPIC attached mirror task may           *
  *                      incorrectly run under region USERID.    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  During transaction initialization of a mirror task attached over
  an IPIC connection the security credentials are extracted from
  the inbound IPIC message. User domain is called with these
  credentials and a user token is returned which maps to the user
  credentials. DFHISXM INIT_XM_CLIENT should return this
  user token to transaction manager and set xmac_set_user_token to
  yes to notify transaction manager of the presence of the token.
  However, occasionally DFHISXM fails to set xmac_set_user_token
  to yes even though a valid user token exists.
  This is due to PM27171 which added code to detect a severe error
  during the initialization phase which creates the user token.
  This sets flag initialize_receiver_error when a severe error
  occurs. When this flag is on DFHISXM sets xmac_set_user_token to
  no to indicate that no user token is present.
  The flag which records the severe error is never initialized and
  when this flag is randomly on, DFHISXM fails to return the user
  token to transaction manager even though one exists.
  When this happens the mirror transaction fails to run under the
  correct USERID.
  

Problem conclusion

• UK63190 UK63393
  DFHISXM has been changed to initialize the
  initialize_receiver_error flag to off.
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM38409 UK67848

Modules/Macros

•    DESISXM  DFHISXM
  

Fix information

• Fixed component name

  CICS TS Z/OS V4

• Fixed component ID

  5655S9700

Applicable component levels

• R600 PSY UK67848

     UP11/05/21 P F105

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.