PH42137: DFHXS0002 SEVERE ERROR 070C IN MODULE DFHXSRC IF NODEJSAPP / CMDSEC / RESSEC CHECKING ACTIVE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• You enable NODEJSAPP security class in RACF and have command and
  resource checking active in the region. Your transaction
  attempts to inquire or update a NODEJSAPP resource (new in CICS
  5.6) and it gets an error similar to the following
  
  DFHXS0002 applid A severe error (code X'070C') has occurred in
  module DFHXSRC.
  
  When trace is active and the dump is examined, you see trace
  entries like the following:
  
  XS 0701 XSRC  ENTRY - FUNCTION(CHECK_CICS_RESOURCE)
  
               RESOURCE_NAME(1C264888 , 00000020)
               RESOURCE_TYPE() ACCESS(COLLECT)
  
  
  XS 070C XSRC  *EXC* INVALID-RESOURCE-TYPE
  
               FUNCTION(CHECK_CICS_RESOURCE)
  
               RESPONSE(INVALID) REASON()
  
  
  Notice the RESOURCE_TYPE being checked is empty. These XS
  trace entries may not show up if you are using an external
  security manager other than RACF.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS Users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: Message DFHXS0002 (code X'070C') in     *
  *                      module DFHXSRC when extracting          *
  *                      statistics for Node.js applications..   *
  ****************************************************************
  An application is running in an environment with both CICS
  resource and command security active and attempts to extract
  statistics using a CICS API call like:
  
  EXTRACT STATISTICS NODEJSAPP RESID(<nodejsappname>)
  
  Module DFHXSRC is entered first to check that the user has the
  authority to collect statistics.
  If this first SAF check is passed, a subsequent check is made
  to see if the user has access to the specific NODEJSAPP resource
  involved.
  
  A table used by DFHXSRC to lookup the name of the SAF Class is
  missing an entry for resource type NODEJSAPP.
  
  This results in a failure to make the SAF call, with
  message DFHXS0002 X'070C'.
  
  Additionally the NODEJSAPP resource type is not indicated as an
  expected value for the domain parameter list,
  
  This results in the RESOURCE_TYPE not being reported correctly
  in XS 0701 tracepoints.
  
  Keywords: DFHXS0002 XS0002 DFHXSRC NODEJSAPP STATISTICS NODEJS
  

Problem conclusion

• DFHXSRC has been updated to:
  - add an entry to the lookup table so that the correct SAF Class
  can be used for resource checking for NODEJSAPP resources.
  - indicate that the NODEJSAPP resource type is an expected value
  for the domain parameter list, so that XS 0701 trace entries
  are formatted correctly.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI79128

Modules/Macros

• DFHXSRC  DFHXSRCT
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R300 PSY UI79128

     UP22/02/01 P F201

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.