IBM Support

OA50419: CKR1941 24 MISSING DEFAULT GROUP FOR DEFINED USER - WHEN RUNNING AU.R COMPLIANCE CHECK.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Error does not occur when running a full set of rules. Only
    when running single rules, such as CKAGR710, CKAGR720, &
    CKAGR730.
    

Local fix

  • Run larger set of rules.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Audit exploiting the RACF   *
    *                 STIG compliance rule RACF0710.               *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Audit might issue MSGCKR1941    *
    *                      while processing the RACF STIG          *
    *                      compliance rule RACF0710.               *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When zSecure Audit evaluates a single RACF STIG rule RACF0710
    (The use of the RACF SPECIAL attribute must be limited to
    appropriate personnel), MSGCKR1941 which states 'Missing default
    group for defined user' is issued.
    

Problem conclusion

  • zSecure Audit has been modified so that MSGCKR1941 is not issued
    while a single RACF0710 rule is evaluated.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA50419

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    211

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-04-27

  • Closed date

    2016-08-26

  • Last modified date

    2016-09-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA82635 UA82636

Modules/Macros

  •    CKRINMO  GKRINMO
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R211 PSY UA82635

       UP16/08/30 P F608

  • R220 PSY UA82636

       UP16/08/30 P F608

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSCE68R","label":"zSecure Admin"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"211","Edition":""}]

Document Information

Modified date:
02 September 2016