PH70983: DFHTRMID SURROGATE CHECK INCORRECTLY ISSUED FOR GMTRAN

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Surrogate security checking is bypassed for CICS supplied
  category 3 transactions, such as CESN or CESL. When a custom
  GMTRAN, which is not a CICS supplied category 3 transaction, is
  used, this surrogate check incorrectly takes place. The DFHTRMID
  check should be bypassed for any valid GMTRAN transaction.
  
  This results in the following error in the terminal when
  connecting to a CICS region:
  DFHAC2206 <DATE> <APPLID> Transaction <TRANSACTION> failed
  with abend AXS4.
  
  The following errors are then observable in MSGUSER:
  
  DFHXS1111 <DATE> <TIME> <APPLID> <TRANSACTION> Security
  violation by user <DFLTUSER> for resource <DFLTUSER>.DFHTRMID in
  class SURROGAT. SAF codes are (X'00000004',X'00000000'). ESM
  codes are (X'00000004',X'00000000'). RACF request made was
  FASTAUTH.
  
  DFHXS1117 <DATE> <TIME> <APPLID> <TRANSACTION> Security
  violation originated from applid <APPLID> client IP address
  <IP> port <PORT> facility TC41 transaction <TRANSACTION> user
  <DFLTUSER> task user <DFLTUSER>.
  
  DFHDU0203I <DATE> <TIME> <APPLID> A transaction dump was taken
  for dumpcode: AXS4, Dumpid: 1/0001, Tranid: <TRANSACTION,
  Tranum: 00000051, Program: <PROGRAM>.
  
  DFHAC2236 <DATE> <TIME> <APPLID> Transaction <TRANSACTION>
  transaction number 00051 abend AXS4 in program <PROGRAM> term
  TC41. Updates to local recoverable resources will be backed out.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS Users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: Security violation occurs every time    *
  *                      the region's Good Morning Transaction   *
  *                      (GMTRAN) runs on a terminal, causing    *
  *                      an AXS4 DFHAC2236 abend in DFHXMAB.     *
  ****************************************************************
  A surrogate check is incorrectly triggered when the region's
  Good Morning Transaction (GMTRAN) runs on a terminal at region
  startup, causing CICS to check that the region userid holds a
  SURROGAT class profile for DFHTRMID. If no such profile
  exists, CICS issues message DFHXS1111 reporting the security
  violation, and the GMTRAN abends AXS4 in DFHXMAB with message
  DFHAC2236.
  

Problem conclusion

• A check has been added to DFHXSRC to bypass DFHTRMID surrogate
  check when the transaction being started matches the region's
  configured GMTRAN.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO09716

Modules/Macros

• DFHXSRC
  

Fix information

• Fixed component name

  CICS TS Z/OS V6

• Fixed component ID

  5655YA100

Applicable component levels

• R600 PSY UO09716

     UP26/09/30 P F609

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.