PH65314: Reinstate feature toggle com.ibm.cics.spool.surrogate.check

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Reinstate  feature toggle: com.ibm.cics.spool.surrogate.check
  to allow disabling of RACF surrogate class checking for job
  submission to the internal reader;  provide flexibility lost
  when migrating from a lower release to 6.2.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: Customers cannot use RACF surrogate     *
  *                      class to authenticate batch job         *
  *                      submission to the spool.                *
  ****************************************************************
  Up to CICS TS 6.1, to enable RACF surrogate class checking when
  submitting batch jobs to the spool via internal reader required
   SIT parm XUSER=YES and feature toggle
  com.ibm.cics.spool.surrogate.check set to true.
  CICS TS 6.2 removed the feature toggle and required only
  XUSER=YES.
  This is preventing customers from upgrading due to the number of
  users that must be given READ access to the RACF profile and
  some customers cannot add the users to RACF as they use bespoke
  authentication methods under CICS.
  

Problem conclusion

• CICS has been updated to reinstate  the feature toggle from CICS
  6.1: 'com.ibm.cics.spool.surrogate.check=true/false'.
  The default is 'true' which means CICS will continue to use RACF
  surrogate class checking for job submissions from CICS as per
  the SIT XUSER setting. Setting the feature toggle to 'false'
  will bypass the surrogate class check when XUSER=YES.
  
  The IBM Documentation for CICS TS 6.x will be updated to
  document this new feature toggle.
  
  .
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO02473

Modules/Macros

• DFHPSJP
  

Fix information

• Fixed component name

  CICS TS Z/OS V6

• Fixed component ID

  5655YA100

Applicable component levels

• R500 PSY UO02473

     UP25/03/18 P F503  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.