IBM Support

OA50657: CKGRACF USER RESUME WITH RRSF DOES NOT RESUME REMOTE USER IF LOCAL USER IS NOT ALSO REVOKED

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When using the CKGRACF USER command with the RESUME subcommand
    and RRSF automatically directs APPL updates (automatic
    direction of application updates), the remote user is not
    resumed if the local user is not revoked.
    

Local fix

  • Revoke the user locally, before doing the "remote" resume
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of the zSecure CKGRACF component       *
    *                 exploiting the software in a RRSF            *
    *                 environment.                                 *
    ****************************************************************
    * PROBLEM DESCRIPTION: The zSecure CKGRACF component does not  *
    *                      propagate the user 'RESUME' request to  *
    *                      the remote RRSF nodes if only the       *
    *                      remote user is revoked.                 *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When the local user is not revoked and the 'CKGRACF USER ...
    RESUME' command is issued, the actual RESUME request is not
    propagated to the remote RRSF nodes.
    

Problem conclusion

  • The zSecure CKGRACF component has been modified so that the user
    RESUME request is correctly propagated to the remote nodes of
    the RRSF network.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA50657

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    211

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-06-06

  • Closed date

    2016-06-14

  • Last modified date

    2016-07-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA81981 UA81982

Modules/Macros

  •    CKGICHE
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R211 PSY UA81981

       UP16/06/15 P F606

  • R220 PSY UA81982

       UP16/06/15 P F606

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSCE68R","label":"zSecure Admin"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"211","Edition":""}]

Document Information

Modified date:
04 July 2016