IJ28485: UNEXPECTED AUTOMATIC SIGNON ATTEMPTS WHEN THE PASSWORD IS CHANGED ON THE HOST WHILE EXPLORER IS CONNECTED TO THE WUI.

APAR status

• Closed as program error.

Error description

• Changing the passowrd on the host while CICS Explorer is
  connected to the WUI results in 3 automatic signon attempts
  and the userid getting revoked. The following scenerio will
  create the failure:
  - make a successful CMCI connection from Exporer to the WUI
  - use Explorer in some way such as display a resource
    definition
  - logon to the host and change your password
  - the connection from Explrer to the WUI terminates and 3
    automatic signon attempts are attempted from Explorer
    and we see these messages:
  DFHXS1201 The password supplied in the verification request
  for userid xxxxx was invalid. This occurred in transaction
  CWWU when userid yyyyy was signed on at netname ????????.
  
  DFHXS1111 CWWU Security violation by user yyyyyy for resource
  zzzzz.CWWU in class TCICSTRN. SAF codes
  are (X'00000008',X'00000000'). ESM codes are
  (X'00000008',X'00000000'). RACF request made was FASTAUTH.
  .
  Beacuse of the above failed 3 attempts the userid gets revoked
  and ICH408I is issued:
  
  ICH408I USER(CS24047 ) GROUP(DEPT313 )
  NAME(xxxxxxx     )
  LOGON/JOB INITIATION - INVALID PASSWORD
  IRR013I  VERIFICATION FAILED. INVALID PASSWORD GIVEN.
  

Local fix

Problem summary

• After an action is made that receives a 401 response from the
  server, such as a password having been changed on the host
  whilst CICS Explorer is still connected to the WUI, other queued
  actions that run subsequently do not check whether the
  connection still considers itself to be connected.  The userid
  will therefore be revoked.
  

Problem conclusion

• The connection configuration has been reworked so that it is
  marked as disconnected if a 401 response occurs.  Subsequent
  queued actions on the connection will fail because it is now
  flagged as not being connected.
  .
  This fix will be made available in Version 5.5.0.11 of the CICS
  Explorer.
  .
  For installation instructions please see: Ordering maintenance
  for IBM CICS Explorer and CICS Explorer plug-ins
  http://www.ibm.com/support/docview.wss?uid=swg21380083
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• EXPLORER
  

Fix information

• Fixed component name

  CICS EXPLORER V

• Fixed component ID

  5655Y0401

Applicable component levels

• R550 PSY

     UP