IBM Support

OA66914: AFTER PTF UJ95655 RECREATING A USERID WITH A PASSWORD INTERVAL OTHER THAN THE DEFAULT CREATES INVALID ALU 24/08/29 PTF PECHANGE

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • After PTF UJ95655 recreating a userID with a password interval
    other than the default creates invalid alu interval(xx) command
    
    After PTF UJ95655, attempts to generate RACF code in zSecure
    Admin using the Recreate User option can result in an invalid
    RACF command. This is only seen when the password interval for
    the user is different from the default interval for the RACF
    database. The command generated is like the following example
    
    altuser ALAN01   interval(30)
    

Local fix

  • Manually remove or modify the invalid command
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Admin with PTFs for APARs   *
    *                 OA66357/OA66569 applied, exploiting the      *
    *                 'Recreate user' function in interactive      *
    *                 mode.                                        *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Admin might generate a          *
    *                      malformed RACF command resulting in     *
    *                      command execution failure.              *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When the 'Recreate user' function is applied to a user profile
    having password interval different from the default interval for
    the RACF database, the zSecure Admin generates a malformed
    'altuser' RACF command (like 'altuser <id> interval(<nn>')
    resulting in error 'INVALID SEGMENT, INTERVAL' when generated
    commands are executed.
    

Problem conclusion

  • zSecure Admin has been modified, so that the 'Recreate user'
    function generates proper RACF commands in interactive mode.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA66914

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    310

  • Status

    CLOSED PER

  • PE

    YesPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2024-08-28

  • Closed date

    2024-08-30

  • Last modified date

    2024-09-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ95881 UJ95882

Modules/Macros

  • C2R3RCDV C2R3RCDW C2R3RCDX C2R3RCF8 CKRFLDT  CKRINLT  CKRMFA
    CKRMODF  CKROUPUT CKRXCUSZ CKRXJPNE CKRXRUSG CKRXRUSZ GKRFLDT
    GKRINLT  GKRMFA   GKRMODF  GKROUPUT
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R250 PSY UJ95882

       UP24/08/31 P F408 {

  • R310 PSY UJ95881

       UP24/08/31 P F408 {

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
03 September 2024