IBM Support

OA51307: ACCESS MONITOR CLEANUP - INVALID PERMIT COMMAND SYNTAX FOR FULLY QUALIFIED GENERIC DATA SET PROFILES.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Access Monitor Convert UACC/ID(*) generated commands from
    panels AM.9.4 and AM.9.5 are missing the generic keyword,
    causing errors when dealing with a fully qualified generic
    profile.
    

Local fix

  • Manually insert GEN or GENERIC into the generated commands.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Access Monitor exploiting   *
    *                 the "Cleanup" function (interactive options  *
    *                 AM.9.4 and AM.9.5).                          *
    ****************************************************************
    * PROBLEM DESCRIPTION: The zSecure Access Monitor "Cleanup"    *
    *                      function (interactive options AM.9.4    *
    *                      and AM.9.5) generates incorrect RACF    *
    *                      commands for fully qualified generic    *
    *                      data set profiles.                      *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    Usage of the "Cleanup - Remove permits, dataset and general
    resource profiles" function" of the zSecure Access Monitor
    (interactive options AM.9.4 and AM.9.5) results in an incorrect
    RACF "PERMIT" command generation for fully qualified generic
    data set profiles (no GEN ERIC  argument is generated for the
    RACF PERMIT command).
    

Problem conclusion

  • zSecure Access Monitor has been modified so that the
    "Cleanup" function (interactive options AM.9.4 and AM.9.5)
    produces the correct RACF "PERMIT" commands for fully
    qualified generic data set profiles.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA51307

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    220

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-09-20

  • Closed date

    2016-10-28

  • Last modified date

    2016-11-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA83200

Modules/Macros

  •    CKRP3AM7
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R220 PSY UA83200

       UP16/11/01 P F610

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"220","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 August 2024