IBM Support

OA66569: AFTER APAR OA66357, WHEN REBUILDING A USER, A SYNTAX ERROR IS REPORTED FOR THE COMMAND GENERATED.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • After APAR OA66357, when rebuilding a user, a syntax error is
    reported for the MFA segment, where the use of
    "TAGS('LASTMFA:1715718909' ))" issues message:
    ICH21051I IBM MFA detected an error in the name of tag LASTMFA
    with the following message: AZF1200E Supported tags: MFAFIRST,
    WINDOW
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Admin exploiting the        *
    *                 'Recreate user' function in interactive      *
    *                 mode.                                        *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Admin might generate an ALTUSER *
    *                      RACF command with tags that cannot be   *
    *                      recreated resulting in a MSGICH21051I   *
    *                      when the command is executed.           *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided and review the        *
    *                 documentation updates.                       *
    ****************************************************************
    When using the line command 'Recreate user' in zSecure Admin in
    interactive mode on a userid with multi-factor authentication
    information defined, zSecure Admin might generate an ALTUSER
    RACF command with tags that are not supported by ALTUSER,
    resulting in a MSGICH21051I which begins with the text "IBM MFA
    detected an error in the name of tag..." when the command is
    executed.
    

Problem conclusion

  • zSecure Admin has been modified, so that the 'Recreate user'
    function generates only tags supported by the ALTUSER command.
    Please note the documentation changes as provided by the APAR
    tracking comment data.
    

Temporary fix

Comments

  • ×**** PE24/08/28 FIX IN ERROR. SEE APAR OA66914  FOR DESCRIPTION
    ×**** PE24/08/28 FIX IN ERROR. SEE APAR OA66914  FOR DESCRIPTION
    

APAR Information

  • APAR number

    OA66569

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    250

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2024-05-28

  • Closed date

    2024-07-17

  • Last modified date

    2024-08-30

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ95655 UJ95656

Modules/Macros

  • C2R3RCDV C2R3RCDW C2R3RCDX C2R3RCF8 CKRFLDT  CKRINLT  CKRMFA
    CKRMODF  CKROUPUT CKRXCUSZ CKRXJPNE CKRXRUSZ GKRFLDT  GKRINLT
    GKRMFA   GKRMODF  GKROUPUT
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R250 PSY UJ95656

       UP24/07/19 P F407

  • R310 PSY UJ95655

       UP24/07/19 P F407

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"250","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
30 August 2024