PH22253: CICSEXECUTORSERVICE.RUNASCICS() WITHOUT ACCESS CAUSES TASK TO HANG.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• * we are using cics bundle with a WAR file inside
  * web request trigger a user-trans (based on URIMAP named ABCD )
    that starts a sub-task implement Runnable (without adding the
    transId) through CICSExecutorService.runAsCICS() , so the
    sub-trans also "runs" under ABCD trans name... but with the
    backend-userid entered in
  -Dcom.ibm.cics.jvmserver.unclassified.userid .
  
  If this user does not have access to the transid, we get:
  
  ICH408I USER(TOTO) GROUP(CICSIN ) NAME(CICS.PLT.USER)  941
     941      ABCD CL(TCITFTRN)
     941      INSUFFICIENT ACCESS AUTHORITY
     941      ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )
  
  and the task hangs, and different abends follow:
  +DFHUS0002  A severe error (code X'0311') has occurred in module
  DFHUSAD.
  +DFHME0116   946
  946   (Module:DFHMEME) CICS symptom string for message DFHUS0002
  is
  946   PIDS/5655Y0400 LVLS/710 MS/DFHUS0002 RIDS/DFHUSAD
  PTFS/UI60340
  946   PRCS/00000311
  or
  
  +DFHSM0002  A severe error (code X'030F') has occurred in module
  DFHSMGF.
  +DFHME0116   267
  267     (Module:DFHMEME) CICS symptom string for message
  DFHSM0002 is
  267     PIDS/5655Y0400 LVLS/710 MS/DFHSM0002 RIDS/DFHSMGF
  PTFS/UI63460
  267     PRCS/0000030F
  

Local fix

• NA
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS Users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: Authorisation error during task         *
  *                      creation after a                        *
  *                      CICSExecutorService.runAsCICS() call    *
  *                      causes the new task to hang.            *
  ****************************************************************
  An application running in a Liberty JVM server uses the
  CICSExecutorService to execute some work on a CICS enabled
  thread.  LateBinding has been enabled within the JVMProfile.
  The userid does not have access to the transaction that they are
  attempting to use.  This causes the Runnable to fail to execute
  and an authorisation error is output to the CICS joblog and
  within the JVM error and trace files.
  
  Following the error the task that was attempted to be created is
  left in the system incorrectly. Repeated failures could lead to
  the CICS region hitting max task.
  
  Keywords: MXT, NOT_AUTH_SET_USERID, BUILD_TRANSACTION
  

Problem conclusion

• DFHSJJS has been updated to ensure that tasks are correctly
  cleaned up after a security error.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI70122 UI70123 UI70124

Modules/Macros

• DFHAMSJ  DFHAPJVM DFHAXIS2 DFHCDJNI DFHEIQSY DFHPIWR  DFHSJDM
  DFHSJDS  DFHSJIT  DFHSJJS  DFHSJJST DFHSJL   DFHSJRL  DFHSJSC
  DFHSJTH  DFHSTP   DFHXMIQ  DFJ@H356 DFJ@H360 DFJ@H427 DFJ@H467
  DFJ@H468 DFJDTCOE DFJOUTRE DFJWLPPL
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R100 PSY UI70122

     UP20/06/19 P F006

• R103 PSY UI70124

     UP20/06/22 P F006

• R10D PSY UI70123

     UP20/06/19 P F006

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.