OA68602: RECREATE OF A PTKTDATA PROFILE WITH A SSIGNON SEGMENT SPECIFYING REPLAY ALLOWED = YES RESULTS IN AN INVALID RALTER COMMAND

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Recreate of a PTKTDATA profile with a SSIGNON segment specifying
  Replay allowed = YES results in an invalid RALTER command.
  
  The generated RALTER command ends with:
  replay )
  
  but it should specify:
  replay(yes))
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Admin exploiting the        *
  *                 'recreate' function for profiles in the      *
  *                 PTKTDATA class in interactive mode.          *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Admin might generate incorrect  *
  *                      'RALTER' commands for profiles in the   *
  *                      PTKTDATA class configured with enhanced *
  *                      PassTicket algorithm.                   *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  When RACF profiles in the PTKTDATA is configured with enhanced
  PassTicket algorithm, the 'recreate' function offered by zSecure
  Admin produces incorrect 'RALTER' commands for such profiles
  where the 'REPLAY' argument lacks its parameter value (YES/NO)
  resulting in command failure.
  

Problem conclusion

• zSecure Admin has been modified, so that the 'recreate' function
  generates correct 'RALTER' commands for RACF profiles in the
  PTKTDATA class configured with enhanced PassTicket algorithm.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ98294 UJ98295

Modules/Macros

• CKRXCREE CKRXRREE
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R310 PSY UJ98295

     UP25/10/22 P F510

• R320 PSY UJ98294

     UP25/10/22 P F510

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.