PH21191: SECPRFX VALUE NOT REPORTED CORRECTLY IN CICS DUMP

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• A CICS region that had a SECPRFX parameter specified, was
  reporting the CICS error
  message correctly showing the SECPRFX
  value
   DFHXS1111 01/14/2020 08:04:26 CICSTS54 CEMT Security
  violation by user
   CICSUSER for resource 54CICSTS.CEMT in
  class TCICSTS1. SAF
   codes are (X'00000008',X'00000000'). ESM
  codes are
   (X'00000008',X'00000000'). RACF request made was
  FASTAUTH.
  but when inspecting the dump, using
   verbx dfhpd710
  'xs=3'
  we saw
  ===XS: SECURITY DOMAIN - SUMMARY
  System
  Initialization Parameters
  --------------------------------
  
  SEC=YES
   SECPRFX=YES
  
  The verbx dfhpd710 'pa=3' also showed
  incorrect secprfx
  ===PA: PARAMETER MANAGER DOMAIN SUMMARY
  
  ===System Initialization Settings
  ==Security
   SEC=YES
  
  SECPRFX=YES
  
  This apar will fix this error so that when using
  IPCS to format a dump, both
   PA - PARAMETER MANAGER DOMAIN
  SUMMARY
   XS - SECURITY DOMAIN - SUMMARY
  show the correct
  information within the dump.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: If CICS is started with SECPRFX=prefix, *
  *                      then a formatted CICS SDUMP incorrectly *
  *                      reports SECPRFX=YES.                    *
  ****************************************************************
  The CICS IPCS VERBEXITs for PA and XS domains incorrectly
  display SECPRFX=YES if CICS has been configured with
  SECPRFX=prefix.
  Additional keywords: DFHPD710 DFHPD720 VERBX
  

Problem conclusion

• The CICS VERBEXITs have been fixed to display the correct
  SECPRFX values as follows:
  
  PA:
  SECPRFX=NO
  SECPRFX=YES
  SECPRFX=prefix  - the prefix supplied in the CICS SIT parameter.
  
  XS when CICS is running with SEC=NO:
  SECPRFX=NO is always displayed, because security is not active.
  
  XS when CICS is running with SEC=YES:
  SECPRFX=NO is displayed when CICS is started with SECPRFX=NO
  SECPRFX=region-userid is displayed when CICS runs SECPRFX=YES
  SECPRFX=prefix is displayed when CICS runs with SECPRFX=prefix.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI67715 UI67716

Modules/Macros

• DFHPADUF DFHXSDUF
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R100 PSY UI67715

     UP20/02/12 P F002

• R200 PSY UI67716

     UP20/02/14 P F002

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.