OA63159: ALERT 1125 TRIGGER CONDITIONS INCORRECT

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Alert 1125 trigger conditions incorrect.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Alert exploiting the        *
  *                 predefined alert ID 1125.                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Alert ID 1125 (Password         *
  *                      spraying attack) is not triggered or is *
  *                      triggered  multiple times for the same  *
  *                      event.                                  *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  zSecure Alert ID 1125 (Password spraying attack) does not
  trigger because SMF records 118  and 119 are not defined as
  records to be captured for this alert. Also records in the
  history buffers are not excluded resulting in multiple alerts
  for the same event.
  

Problem conclusion

• zSecure Alert ID 1125 does not trigger or is issued multiple
  times.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ08771

Modules/Macros

• C2PIDACF C2PS1125
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R250 PSY UJ08771

     UP22/07/15 P F207

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.