PH00106: ETO SUPPORT ENHANCED TRANSACTION VERIFICATION IN IMS V14 AND LATER DOES NOT SUPPORT REMOVAL OF DFSCTRN0 FROM THE IMS NUCLEUS

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• ETO Support Enhanced Transaction Verification in IMS V14 and
  later does not support removal of DFSCTRN0 from the IMS nucleus
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: IBM IMS Extended Terminal Option Support for *
  *                 z/OS Version 3 Release 2 (FMID=H1J4320)      *
  *                 users with IMS V14 and later, Enhanced       *
  *                 Transaction Verification, and user supplied  *
  *                 DFSCTRN0 exit.                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: Enhanced Transaction Verification       *
  *                      ceases to work with this configuration. *
  ****************************************************************
  * RECOMMENDATION: Apply the maintenance for this APAR.         *
  ****************************************************************
  IMS ETO Support Version 3.2 Enhanced Transaction Verification
  ceases to work with user supplied DFSCTRN0 in IMS V14 and later.
  

Problem conclusion

• IMS ETO Support has been modified to load and use customer
  supplied DFSCTRN1 instead of DFSCTRN0.
  
  ========================
  = Documentation Change =
  ========================
  IBM IMS Extended Terminal Option Support for z/OS Version 3
  Release 2, User's Guide and Reference (SC19-3982-02) should be
  changed as follows:
  ================================================================
  > IMS ETO Support overview
  >> Managing the IMS ETO environment
  >>> IMS ETO Support user exits
  * The following line is added.
  
  ----------------------------------------------------------------
  :
    IMS ETO Support's initialization exit attempts to load the
    following user exits at IMS startup:
    o DFSINTX1 (Initialization user exit)
    o DFSGMSG1 (Greetings Messages user exit)
    o DFSCCMD1 (Command Authorization user exit)
    o DFSINSX1 (Output Creation user exit)
    o DFSSGFX1 (Signoff user exit)
    o DFSSGNX1 (Signon user exit)
    o DFSSGNX2 (Signon user exit ? always called)
    o DFSLGNX1 (Logon user exit)
    o DFSLGNX2 (Logon user exit - always called, unless other
      logon user exits - DFSLGNX0 or DFSLGNX1 - reject the logon)
    o DFSINSX2 (Output creation exit - called when exit DFSINSX0
      ends with a return code zero):
  | o DFSCNTR1 (Transaction Authorization user exit)
  :
  ================================================================
  > Choosing IMS ETO Support options
  >> Security options
  >>> IMS ETO Support Enhanced Transaction Verification
  * The following lines are added and changed.
  ----------------------------------------------------------------
  :
    The ETV methods are optional and can be used in addition to,
    or in place of, IMS RACF or IMS SMU security. Only one form of
    ETV can be used at a time.
  
    Both forms of ETV checking (RACF or IMS ETO Support Matrix)
    use the IMS Transaction Authorization Exit (DFSCTRN0) to
    perform the validation.
  | However, the ETV cannot be used If there is an existing the
  | user version of DFSCTRN0.
  | To use a user version of DFSCTRN0 along with ETV processing,
  | you must rename the user version of DFSCTRN0 to DFSCTRN1.
    For example:
  | o At IMS startup, IMS ETO Support sets an intercept for its
  |   version of the DFSCTRN0 exit, and saves the address of any
  |   user DFSCTRN1 exit.
  | o If the IMS ETO Support version of DFSCTRN0 denies access to
  |   the transaction, the DFSCTRN1 is not invoked.
  | o If IMS ETO Support determines access is allowed, the
  |   DFSCTRN1 is called and all parameter input is the same as
  |   if IMS ETO Support was never called.
  :
  :
    Authorization is performed at initial transaction arrival and
    for IMS CHNG calls:
    o If multiple LTERMs are assigned to a NODE/USER, IMS ETO
      Support will perform authorization at initial transaction
      arrival using the first LTERM that is not either STOPPED or
      LOCKED.
    o ETV does not process transactions from APPC or OTMA devices.
    o If IMS rejects transaction authorization, the IMS ETO
      Support DFSCTRN0 exit does not get control.
  | o If the IMS ETO Support DFSCTRN0 exit rejects transaction
  |   authorization, the DFSCTRN1 does not get control.
  :
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI57546

Modules/Macros

• IZTSECIE IZTSECIF
  

Fix information

• Fixed component name

  IMS ETO SUPPORT

• Fixed component ID

  5655E1200

Applicable component levels

• R320 PSY UI57546

     UP18/08/02 P F808

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.