A fix is available
APAR status
Closed as program error.
Error description
You are running at TS 5.5. . You have defined a MQMONITOR resource with Userid aaaa and transaction CKTI. . You found that you need SURROGAT(xxxxxxxx.DFHINSTL) ACCESS(READ) and SURROGAT(xxxxxxxx.DFHSTART) on the Region ID. . Meanwhile, your system programs and PLT ID have SPI(MQMON) ACCESS(INQUIRE,SET). . You can install the MQMONITOR resource just fine with the Region ID having DFHINSTL and DFHSTART permissions. However, even with the sysprogs having SPI access, you are failing to start the MQMONITOR because you are failing a surrogate check on the sysprog's ID to xxxxxxxx.DFHSTART. Using Autostart=Yes instead of No to try and test, then see PLT fail for the same reason.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All CICS Users. * **************************************************************** * PROBLEM DESCRIPTION: Message DFHMQ0390 is being issued when * * attempting to start an MQ Monitor with * * a transaction id of CKTI. * **************************************************************** When attempting to start an MQMONITOR with a transaction id of CKTI, message DFHMQ0390 is being issued; the CICS Job log also shows message DFHXS1111 is issued for a security violation for a resource of monuserid.DFHSTART in class SURROGAT. Keywords: msgDFHXS1111 msgDFHMQ0390 MQ0390 XS1111
Problem conclusion
DFHMQTM has been changed to not do the DFHSTART surrogate check when installing an MQMONITOR. DFHEIIC has been changed to avoid security checks when the START request has originated from DFHMQMNS.
Temporary fix
Comments
APAR Information
APAR number
PH17093
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
200
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2019-09-18
Closed date
2020-01-30
Last modified date
2020-02-04
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI67635
Modules/Macros
DFHEIIC DFHMQTM
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
R200 PSY UI67635
UP20/01/31 P F001
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.5","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.5","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
04 February 2020