PH31270: AEXZ ABEND ON CHANGE PASSWORD COMMAND INSTEAD OF NOTAUTH

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• An EXEC CICS CHANGE PASSWORD command causes the user task to
  abend AEXZ. RACF fails the corresponding UPDATE_PASSWORD
  request with response codes 8,34:
  
  XS FE04 XSSB *EXC* FUNCTION(UPDATE_PASSWORD)
                     RESPONSE(EXCEPTION) REASON()
                     SAF_RESPONSE(8) SAF_REASON(0)
                     ESM_RESPONSE(34) ESM_REASON(0)
  
  Reason 34 indicates:
  The user is not authorized to use the application.
  
  After PI86512, the APPLID is being passed to RACF on the
  RACROUTE VERIFYX call. If the APPL Class is active, the
  userid doing the CHANGE PASSWORD request must now be
  permitted to access the APPLID. Module DFHESN should return
  NOTAUTH with a valid REASON, rather than abending the task AEXZ.
  
  PH01941 is also applied but the task still abends AEXZ.
  
  Additional Symptom(s) Search Keyword(s): KIXREVDAM  35PAD163
  DFHXSPW DFHXSSB ICH408I ABENDAEXZ
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: EXEC CICS CHANGE PASSWORD abends AEXZ.  *
  ****************************************************************
  A userid was defined with UACC(NONE) in the RACF APPL class.
  This meant that the USERID was prohibited from changing the
  password by way of an EXEC CICS CHANGE PASSWORD command.
  However, when attempted the request abended AEXZ (rather than
  returning NOTAUTH with an appropriate EIBRESP2 value ).
  
  The same problem exists for EXEC CICS CHANGE PHRASE.
  

Problem conclusion

• DFHESN has been modified, in the aforementioned scenario, a
  NOTAUTH with an EIBRESP2 of 17 will be returned.
  
  CICS TS @n.n@ Knowledge Center will be updated to reflect
  a new EIBRESP2 of 17 for CHANGE PASSWORD and CHANGE PHRASE:
  
  17 The USERID is not authorised to use the application.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI73799 UI73800 UI73801 UI73802 UI73803 UI73804 UI73805 UI73806
  UI73807 UI73808

Modules/Macros

• DFHESN   DFHISXS  DFHPITC  DFHSOIS  DFHSOLS  DFHSOSE  DFHSZREQ
  DFHUSAD  DFHWBSR  DFHWBXM  DFHWBXN  DFHXSAD  DFHXSDM  DFHXSFL
  DFHXSIS  DFHXSLU  DFHXSPW  DFHXSPWT DFHXSRC  DFHXSSA  DFHXSSB
  DFHXSSBT DFHXSTRI EYU0VBPC
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI73805

     UP21/02/21 P F102

• R00M PSY UI73806

     UP21/02/21 P F102

• R100 PSY UI73803

     UP21/02/21 P F102

• R10M PSY UI73804

     UP21/02/21 P F102

• R200 PSY UI73801

     UP21/02/19 P F102

• R20M PSY UI73802

     UP21/02/19 P F102

• R300 PSY UI73799

     UP21/02/19 P F102

• R30M PSY UI73800

     UP21/02/19 P F102

• R900 PSY UI73807

     UP21/02/26 P F102

• R90M PSY UI73808

     UP21/02/26 P F102

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.