IBM Support

OA66357: RA.U RE-CREATION OF MFA SEGMENT ONLY WORKS WHEN "USE CKGRACF" SELECTED.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • When recreating a user with an MFA segment, RACF commands are
    not generated to recreate the segment, unless "Use CKGRACF" is
    also selected.  This should not be necessary.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Admin exploiting the        *
    *                 'Recreate user' function in interactive      *
    *                 mode.                                        *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Admin does not generate proper  *
    *                      RACF commands for recreating user       *
    *                      profiles for profiles with MFA segment  *
    *                      data unless the 'Use CKGRACF to update  *
    *                      the user profile' option is checked.    *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided and review the        *
    *                 documentation updates.                       *
    ****************************************************************
    When 'Use CKGRACF to update the user profile' option is not
    checked, the 'Recreate user' function of zSecure Admin does not
    generate RACF commands to recreate the MFA segment data for user
    profiles having that data.
    

Problem conclusion

  • zSecure Admin has been modified, so that the 'Recreate user'
    function generates proper RACF commands to recreate user
    profiles having MFA segment data. Please note the documentation
    updates as provided by the APAR tracking comment data.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA66357

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    250

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2024-04-04

  • Closed date

    2024-04-26

  • Last modified date

    2024-05-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ95172 UJ95173

Modules/Macros

  • CKA$INDX CKGXRUS  CKRP3UR@ CKRT3URA CKRXCUSZ CKRXRUSG CKRXRUSZ
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R250 PSY UJ95173

       UP24/04/27 P F404

  • R310 PSY UJ95172

       UP24/04/27 P F404

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"250","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
02 May 2024