IBM Support

OA53878: PROFILES NOT PROFILES CONSISTENTLY REPORTED WITH MASK WHEN USING MUTIPLE RACF DATASETS WITH A RANGE TABLE

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Profiles not all consistently reported with MASK when using
    mutiple RACF datasets with a range table.
    

Local fix

  • Use CARLA command SUPPRESS INDEX
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Admin/Audit for RACF        *
    *                 exploiting the software on systems with a    *
    *                 RACF database range table (ICHRRNG).         *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Admin/Audit for RACF performs   *
    *                      profile selection based on MASK/FILTER  *
    *                      values incorrectly on systems with a    *
    *                      RACF database range table (ICHRRNG)     *
    *                      leading to incomplete or incorrect      *
    *                      reports.                                *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    zSecure Admin/Audit for RACF performs profile selection based on
    MASK/FILTER values incorrectly on systems with a RACF database
    range table (ICHRRNG) in cases where a search pattern is
    specified in a FILTER/MASK selection argument (or its prefix if
    generics are used) matches ICHRRNG range start value and there
    are multiple RACF data sets that fall into the matched range.
    Only the first RACF data set gets processed resulting in
    incomplete profile processing.
    

Problem conclusion

  • zSecure Admin/Audit has been modified so that it correctly
    processes the RACF database range table.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA53878

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    230

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-09-06

  • Closed date

    2017-10-24

  • Last modified date

    2017-11-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA94072

Modules/Macros

  • CKRCLOSE CKRXINIT GKRCLOSE GKRXINIT
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R230 PSY UA94072

       UP17/10/25 P F710

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSCE68R","label":"zSecure Admin"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"230","Edition":""}]

Document Information

Modified date:
02 November 2017