PH47470: DFHXS0001 ABEND0E0 IN DFHXSKR WHEN USING EXEC CICS VERIFY TOKEN KERBEROS

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• CICS TS 5.6 is running an application which does many
  EXEC CICS VERIFY TOKEN() KERBEROS calls to ESM ( RACF).
  Occasionally this CICS command causes an abend0E0 in RACF.
  CICS messages log shows :
  DFHXS0001 applid An abend (code 0E0/AKEA) has occurred at
  offset X'FFFF' in module DFHXSKR
  DFHAC2236 date time applid Transaction ABCD transaction number
  12345 abend AEXZ
  .
  In order to get us a dump closer to the time of the abend0E0
  the following SLIP trap:
  SLIP SET,A=SVCD,COMP=0E0,ID=S0E0,
  SDATA=(ALLNUC,PSA,CSA,GRSQ,LPA,LSQA,RGN,SQA,SUM,SWA,TRT),JOBNAME
  =jobname,END.
  The SLIP dump shows :
  CICS trace :
  11554 QR    AP 00E1 EIP   ENTRY VERIFY-TOKEN
  11554 QR    XS 0A01 XSKR  ENTRY INQUIRE_CLIENT_PRINCIPAL
  11554 QR    DS 1100 DSWR  ENTRY GET_RESOURCE
  11554 QR    LM 0003 LMLM  ENTRY LOCK
  11554 QR    LM 0004 LMLM  EXIT  LOCK/OK
  11554 QR    LM 0003 LMLM  ENTRY UNLOCK
  11554 QR    LM 0004 LMLM  EXIT  UNLOCK/OK
  11554 QR    DS 1101 DSWR  EXIT  GET_RESOURCE/OK
  11554 L8083 XS FE01 XSSK  ENTRY INQUIRE_CLIENT_PRINCIPAL
  and this is he last trace before the SLIP fired .
  Failing task has KE stack :
  KE_NUM @Stack Len  Type Address  Link Reg Offset Error Name
  012D 1EAFBD30 0858 Lifo 1DFEF5D8 1DFEE122 000000 DFHESN
  012D 1EAFC588 0570 Dom  1CF71DA8 1CF73668 0018C0 DFHXSKR
                     Int   +00047A 1CF71FEC 000244
                                          INQUIRE_CLIENT_PRINCIPAL
                     Int   +00161E 1CF7280E 000A66 ISSUE_CICS_SVC
  .
  In summary :
  EC VERIFY TOKEN KERBEROS gets occasional abend0E0 rc29 RSN 29
  RSN 29 = "An ALET specified an access list entry (ALE) that is
  not valid."
  .
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: DFHXS0001 applid An abend               *
  *                      (code 0E0/AKEA) has occurred at offset  *
  *                      X'FFFF' in module DFHXSKR.              *
  ****************************************************************
  An application that executes an EXEC CICS VERIFY TOKEN()
  KERBEROS call gets an intermittent abend 0E0 with reason code 29
  and a transaction abend AEXZ, this is because DFHXSSK has not
  explicitly cleared R_ticketserv parameter list before the
  R_Ticketserv call resulting in a non-zero ALET.
  

Problem conclusion

• DFHXSSK has been changed to now clear the R_ticketserv parameter
  list before the R_Ticketserv call to ensure the ALET is always
  zero.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PH48509 PH48510 PH48512 PH48514 PH48515 UI83025

Modules/Macros

• DFHXSSK
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R300 PSY UI83025

     UP22/10/28 P F210

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.