PM06995: WHEN A WUI USER SIGNS ON,FIND AN UNASSIGNED VITB,INITIALIZE IT. IF START FAILS,WE ISSUE A MESSAGE,BUT THE VITB NEVER UNASSIGNED

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Orphaned VITBs due to userid not authorized for COVA.
  When a user not authorized for COVA tries to connect on WUI, he
  receives EYUVC1014E Unable to create User environment. Failure
  during user task creation.
  
  
  For this connection a VITB is allocated with FF000000 in
  vitb_vktb_ptr.
  This value in vitb_vktb_ptr is a temporay status to avoid a
  potentiel race condition (dyu0vits.design).
  
  In WUI msgusr, security violation message is received:
  DFHXS1111 02/03/2010 13:54:44 CICS1WUI COVA Security violation
  by user CICSBID for resource COVA in class TCICSTRN.
  SAF codes are (X'00000008',X'00000000').
  ESM codes are (X'00000008',X'00000000').
  but VITB is not deallocated.
  
  Timeout routine and COVC (option 4 User sessions) bypass this
  VITB with
  code:
  if (vitb_vktb_ptr  = 0) &            Not unallocated and ...
     (vitb_vktb_ptr  = 'FF000000'X)    ... not allocated but
                                           ASLRT uninitialised
  and VITB is never deallocated. WUI region must be recycled to
  deallocated this VITB.
  
  If this user retries many times, all VITB can be allocated with
  this
  status and Maximum user limit can be reached, message:
  EYUVS0030E EYUWUIE1 Signon rejected. Maximum user limit (5)
  reached.
  Customer got problem at CICS TS 3.2, same problem on our TS 4.1.
  

Local fix

•  To stop and restart the WUI .
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICSPlex SM V3R2M0 Users                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: A user not authorized for COVA tries    *
  *                      to connect to the WUI.  The following   *
  *                      message is sent to the browser:         *
  *                      .                                       *
  *                         EYUVC1014E Unable to create User     *
  *                              environment. Failure during     *
  *                              user task creation.             *
  *                      .                                       *
  *                      After this user retries many times,     *
  *                      message:                                *
  *                      .                                       *
  *                         EYUVS0030E  Signon rejected. Maximum *
  *                              user limit (nn) reached.        *
  *                      .                                       *
  *                      is issued for each additional signon    *
  *                      attempt.                                *
  ****************************************************************
  * RECOMMENDATION: After applying the PTF that resolves this    *
  *                 APAR, all MASes which act as Web User        *
  *                 Interface (WUI) servers must be recycled     *
  *                 to pick up the updated code.  Note that      *
  *                 all servers do not have to be restarted at   *
  *                 the same time.                               *
  ****************************************************************
     During server initialization a pool of User Task Blocks
  (VITBs) is allocated.  The number of available blocks is set
  by the MAXUSERS WUI system parameter.  When a user signon is
  processed, a VITB is taken from the pool and initialized for
  the user.  An API Service Long Running Task (ASLRT - COVA
  Transaction) is then started for the user.  If the START for
  the COVA transaction fails, or the START returns RESP=NORMAL
  but the task is not started, a trace is written and message
  EYUVC1013E or EYUVC1014E is issued, but the assigned VITB is
  not returned to the free pool.  After a number of tries, the
  pool of VITBs might become exhausted, preventing additional
  WUI users from signing on.
  

Problem conclusion

•    Module EYU0VITA (VITA - Add WUI User Environment) has been
  modified to release the acquired VITB if the START for trans-
  action COVA fails.  A new flag was added to the request element
  for EYU0VITD (VITD - Delete User Environment) requesting that
  an uninitialized VITB be purged, and EYU0VPSN (VPSN - Protected
  Signon Proxy) was modified to pass a request element to VITD
  with the purge flag set to return the inactive VITB to the free
  pool, if an API Service LRT (ASLRT) was not started.
  

Temporary fix

•             *********
              * HIPER *
              *********
  FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PM07008 UK55175

Modules/Macros

•    DYU0VGAI DYU0VITS DYU0VPHI DYU0VPSN EYUBVITD
  EYUBVITS EYU0VGAI EYU0VITA EYU0VITD EYU0VITK EYU0VITL EYU0VPHI
  EYU0VPSN
  

Fix information

• Fixed component name

  CICSTS V3 Z/OS

• Fixed component ID

  5655M1500

Applicable component levels

• R50M PSY UK55175

     UP10/03/16 P F003

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.