PH66043: EXCESSIVE FILE I/O IN DFH$XSR WHEN CREATING RACF COMMANDS FROM SECURITY METADATA

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The DFHSM2R JCL is run to create RACF commands from security
  metadata. This job invokes the DFH$XSR program. When DFH$XSR is
  processing the metadata, it will put together the commands to
  create and populate the RACF groups, then it will write these
  commands to the output file. However, the current coding of
  DFH$XSR will result in CICS overwriting the output file with
  these commands twice for every userid in the user_lists section
  of the metadata.
  
  
  This APAR aims to remove this unnecessary I/O from DFH$XSR and
  allow the commands to be written to the output file only once.
  
  Additional Keywords:
  KIXREVACC
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS Users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: DFHSM2R JCL is ran to process security  *
  *                      metadata into RACF commands to create   *
  *                      and populate groups. The output results *
  *                      in these commands being duplicated      *
  *                      twice for each userid in the user_lists *
  *                      section of the metadata.                *
  ****************************************************************
  DFHSM2R JCL is run to create RACF commands from security
  metadata typically generated from DFHR2SM. This invokes DFH$XSR
  which processes the given metadata to produce RACF commands to
  reproduce the RACF definitions. This leads to excessive IO usage
  as CICS overwrites the output file with these commands twice for
  every userid in the user_lists section of the metadata.
  

Problem conclusion

• CICS has been updated to ensure it doesn't repeat the output for
  every userid in the user_lists section of the metadata.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO03343 UO03344

Modules/Macros

• DFH$XSR
  

Fix information

• Fixed component name

  CICS TS Z/OS V6

• Fixed component ID

  5655YA100

Applicable component levels

• R400 PSY UO03344

     UP25/05/24 P F505

• R500 PSY UO03343

     UP25/06/04 P F506  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.