A fix is available
APAR status
Closed as program error.
Error description
After APAR OA66357, when rebuilding a user, a syntax error is reported for the MFA segment, where the use of "TAGS('LASTMFA:1715718909' ))" issues message: ICH21051I IBM MFA detected an error in the name of tag LASTMFA with the following message: AZF1200E Supported tags: MFAFIRST, WINDOW
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: Users of zSecure Admin exploiting the * * 'Recreate user' function in interactive * * mode. * **************************************************************** * PROBLEM DESCRIPTION: zSecure Admin might generate an ALTUSER * * RACF command with tags that cannot be * * recreated resulting in a MSGICH21051I * * when the command is executed. * **************************************************************** * RECOMMENDATION: Apply the PTF provided and review the * * documentation updates. * **************************************************************** When using the line command 'Recreate user' in zSecure Admin in interactive mode on a userid with multi-factor authentication information defined, zSecure Admin might generate an ALTUSER RACF command with tags that are not supported by ALTUSER, resulting in a MSGICH21051I which begins with the text "IBM MFA detected an error in the name of tag..." when the command is executed.
Problem conclusion
zSecure Admin has been modified, so that the 'Recreate user' function generates only tags supported by the ALTUSER command. Please note the documentation changes as provided by the APAR tracking comment data.
Temporary fix
Comments
×**** PE24/08/28 FIX IN ERROR. SEE APAR OA66914 FOR DESCRIPTION ×**** PE24/08/28 FIX IN ERROR. SEE APAR OA66914 FOR DESCRIPTION
APAR Information
APAR number
OA66569
Reported component name
ZSEC BASE,ADMIN
Reported component ID
5655T0100
Reported release
250
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2024-05-28
Closed date
2024-07-17
Last modified date
2024-08-30
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UJ95655 UJ95656
Modules/Macros
C2R3RCDV C2R3RCDW C2R3RCDX C2R3RCF8 CKRFLDT CKRINLT CKRMFA CKRMODF CKROUPUT CKRXCUSZ CKRXJPNE CKRXRUSZ GKRFLDT GKRINLT GKRMFA GKRMODF GKROUPUT
Fix information
Fixed component name
ZSEC BASE,ADMIN
Fixed component ID
5655T0100
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"250","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Document Information
Modified date:
30 August 2024