PI86512: CICS IS NOT PASSING THE APPL PARAMETER ON THE VERIFYX CALL IT USES TO CHANGE A PASSWORD

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• CICS is not passing the APPL parameter on the VERIFYX call it
  uses to change a password (which is what the set of input
  parameters request CICS to do).  APPL is not relevant when
  changing a password so it has never been passed.
  
  If the VERIFYX call was actually part of a SIGNON for an MFA
  user then MFABYPASS checking cannot be successful due to the
  missing APPL parameter.
  

Local fix

• No local fix
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: CICS signon using Multi-Factor          *
  *                      Authentication BYPASS may not work.     *
  *                      A DFHXSnnnn message may be issued.      *
  ****************************************************************
  In the reported problem, Multi-Factor Authentication (MFA) was
  being used but the user wanted to exclude some users from MFA
  by using the RACF MFABYPASS.APPL.* profile updated accordingly
  with users who could bypass MFA.
  This mechanism failed and would usually be accompanied with an
  DFHXSnnnn error message. A RACROUTE VERIFYX call from DFHXSSB
  code was made but RACF required the APPLID parameter which
  was not provided.
  

Problem conclusion

• DFHXSSB has been modified and will now pass to RACF, the APPLID
  parameter on the appropriate RACROUTE VERIFYX call.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI51720 UI51721

Modules/Macros

• DFHXSSB
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI51720

     UP17/11/17 P F711

• R100 PSY UI51721

     UP17/11/17 P F711

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.