IBM Support

OA65769: PASSTICKET GENERATION FAILURE SMF RECORD REPORTED AS SUCCESS IN SMF NEWLIST

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • PassTicket generation failure SMF record reported as success in
    SMF newlist.
    
    For example, a failure SMF record is reported incorrectly by
    zSecure Audit as:
    
    RACF PTCREATE success with enhanced passticket type MIXED
    RC8-1007159288
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Audit exploiting SMF        *
    *                 reports.                                     *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Audit reports incorrect         *
    *                      information in the RECORDDESC field for *
    *                      RACF SMF records with the event code 82 *
    *                      (PassTicket Generation).                *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    The RECORDDESC field generated by zSecure Audit is formatted
    incorrectly, so that RACF records with the event code 82
    (PassTicket Generation) are reported as 'success' while the SMF
    record itself represents the 'Generation request failed' event.
    

Problem conclusion

  • zSecure Audit has been modified, so that the RECORDDESC field
    for RACF SMF records with the event code 82 (PassTicket
    Generation) reports correct information of the event result
    (success/failure) and the return code provided by the SMF record
    is formatted as hexadecimal instead of decimal.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA65769

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    250

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2023-11-06

  • Closed date

    2023-11-16

  • Last modified date

    2023-12-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ94128 UJ94129

Modules/Macros

  • CKASINT  GKRSINT
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R250 PSY UJ94129

       UP23/11/17 P F311

  • R310 PSY UJ94128

       UP23/11/17 P F311

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"250","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
04 December 2023