IBM Support

OA53874: PROFILES NOT PROFILES CONSISTENTLY REPORTED WITH MASK WHEN USING MUTIPLE RACF DATASETS WITH A RANGE TABLE

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Profiles not all consistently reported with MASK when using
    mutiple RACF datasets with a range table.
    

Local fix

  • Use CARLA command SUPPRESS INDEX
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Admin/Audit for RACF        *
    *                 exploiting the software on systems with a    *
    *                 RACF database range table (ICHRRNG).         *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Admin/Audit for RACF performs   *
    *                      profile selection based on MASK/FILTER  *
    *                      values incorrectly on systems with a    *
    *                      RACF database range table (ICHRRNG)     *
    *                      leading to incomplete or incorrect      *
    *                      reports.                                *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    zSecure Admin/Audit for RACF performs profile selection based on
    MASK/FILTER values incorrectly on systems with a RACF database
    range table (ICHRRNG) in cases where a search pattern is
    specified in a FILTER/MASK selection argument (or its prefix if
    generics are used) matches ICHRRNG range start value and there
    are multiple RACF data sets that fall into the matched range.
    Only the first RACF data set gets processed resulting in
    incomplete profile processing.
    

Problem conclusion

  • zSecure Admin/Audit has been modified so that it correctly
    processes the RACF database range table.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA53874

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    211

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-09-06

  • Closed date

    2017-10-24

  • Last modified date

    2017-11-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA94070 UA94071 UA94073

Modules/Macros

  •    CKRCLOSE CKRXINIT GKRCLOSE GKRXINIT
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R211 PSY UA94070

       UP17/10/25 P F710

  • R220 PSY UA94071

       UP17/10/25 P F710

  • R221 PSY UA94073

       UP17/10/25 P F710

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSCE68R","label":"zSecure Admin"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"211","Edition":""}]

Document Information

Modified date:
01 November 2017