A fix is available
APAR status
Closed as program error.
Error description
You are running at TS 5.4. . You have defined a MQMONITOR resource with Userid aaaa and transaction CKTI. . You found that you need SURROGAT(xxxxxxxx.DFHINSTL) ACCESS(READ) and SURROGAT(xxxxxxxx.DFHSTART) on the Region ID. . Meanwhile, your system programs and PLT ID have SPI(MQMON) ACCESS(INQUIRE,SET). . You can install the MQMONITOR resource just fine with the Region ID having DFHINSTL and DFHSTART permissions. However, even with the sysprogs having SPI access, you are failing to start the MQMONITOR because you are failing a surrogate check on the sysprog's ID to xxxxxxxx.DFHSTART. Using Autostart=Yes instead of No to try and test, then see PLT fail for the same reason.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users * **************************************************************** * PROBLEM DESCRIPTION: Message DFHMQ0390 is being issued when * * attempting to start an MQ Monitor with * * a transaction id of CKTI. * **************************************************************** When attempting to start an MQMONITOR with a transaction id of CKTI, message DFHMQ0390 is being issued; the CICS Job log also shows message DFHXS1111 is issued for a security violation for a resource of monuserid.DFHSTART in class SURROGAT. Keywords: msgDFHXS1111 msgDFHMQ0390 MQ0390 XS1111
Problem conclusion
DFHMQTM has been changed to not do the DFHSTART surrogate check when installing an MQMONITOR. DFHEIIC has been changed to avoid security checks when the START request has originated from DFHMQMNS.
Temporary fix
Comments
APAR Information
APAR number
PH25544
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
100
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2020-05-19
Closed date
2020-06-24
Last modified date
2020-07-06
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI70212
Modules/Macros
DFHEIIC DFHMQTM
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
R100 PSY UI70212
UP20/06/25 P F006
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.4","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]
Document Information
Modified date:
07 July 2020