IBM Support

OA68221: ALERT 1506 IS CONFIGURED FOR SMF TYPE 90 RECORDS, BUT USES AN SMF TYPE 80 SELECT STATEMENT, CAUSING NO ALERT TO BE TRIGGERED

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Alert 1506 is configured for SMF Type 90 records, but uses an
    SMF Type 80 Select statement, causing no alert to be triggered
    
    Alert skeleton C2PS1506 shows
    
    
    000039 )IM C2PSGNEW
    
    000040  select event=(RDEFINE,RALTER,RDELETE) likelist=recent
    class=GLOBAL
    000041 )CM EMAIL sortlist
    
    
    There are none of these events in a Type 90 record.
    Consequently, the alert will never be triggered
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Alert exploiting predefined *
    *                 alert ID 1506.                               *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Alert ID 1506 (System authority *
    *                      removed) is not triggered.              *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    zSecure Alert ID 1506 (System authority removed) is not
    triggered because it collects SMF 90 records instead of 80.
    

Problem conclusion

  • zSecure Alert has been modified, so that SMF 80 records are
    collected for predefined alert ID 1506 (System authority
    removed).
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA68221

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    310

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2025-07-18

  • Closed date

    2025-08-28

  • Last modified date

    2025-08-31

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ97925 UJ97926 UJ97927

Modules/Macros

  • C2PIDACF
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R240 PSY UJ97927

       UP25/08/29 P F508

  • R250 PSY UJ97926

       UP25/08/29 P F508

  • R310 PSY UJ97925

       UP25/08/29 P F508

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310","Line of Business":{"code":"LOB70","label":"Z TPS"}}]

Document Information

Modified date:
31 August 2025