PI94052: CICS LIBERTY USERID_NOT_MUTABLE EXCEPTION AFTER APPLYING MAINTENANCE TO 17.0.0.3

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• You have been running CICS Liberty 16.0.0.4 without issue, and
  recently applied maintenance to 17.0.0.*.  Starting a web
  application secured using the LDAP registry together with ID
  propagation, CICS generates the following FFDC content and
  authorizations fail:
  .
  Exception =
  com.ibm.wsspi.webcontainer.security.SecurityViolationException
  Source = com.ibm.ws.webcontainer.servlet.ServletWrapper.init
  probeid = nnn
  Stack Dump =
  com.ibm.wsspi.webcontainer.security.SecurityViolationException:
  java.lang.RuntimeException:
  com.ibm.cics.domains.DomainException:
  Class: Dfhsjjsj,
  function: SWITCH_PTHREAD_CONTEXT,
  response: EXCEPTION,
  reason: USERID_NOT_MUTABLE  ...
  .
  There is a corresponding error in the messages.log:
  SystemErr [DFHSJTHP.TASKxxx.CJSU]
  [com.ibm.cics.wlp.security.zos] [CICSThreadIdentityServiceImpl]
  @Error: set() - *** SJJS SWITCH_PTHREAD_CONTEXT failed. ***
          com.ibm.cics.domains.DomainException:
  Class: Dfhsjjsj,
  function: SWITCH_PTHREAD_CONTEXT,
  response: EXCEPTION,
  reason: USERID_NOT_MUTABLE
  .
  DFHSJJS is invoked with TRANID(CJSU) and the incoming work is
  considered unclassified as it is not covered by one of the
  following cases:
  * HTTP threads
  * Threads where the caller was a CICS thread
  * A special case for scheduled executor thread
  .
  SET_USER_MUTABLE(NO) is returned in SJXM INIT_XM_CLIENT, which
  means CICS is not allowed to push a mutable user ID onto this
  thread by the ThreadIdentityService.
  .
  When DFHSJJS SWITCH_PTHREAD_CONTEXT with NEW_USERID() is
  invoked, as MUTABLE set to No, a USERID_NOT_MUTABLE exception
  is returned.
  Additional Symptom(s) Search Keyword(s): KIXREVSVR
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS Users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: CJSU transaction fails with             *
  *                      USERID_NOT_MUTABLE error.               *
  ****************************************************************
  During the execution of Liberty work a CJSU transaction is
  attached for some unclassified work.  This work attempts a call
  into CICS causing a CICS Task environment to be created.  After
  the creation of the task Liberty attempts to set the userid of
  the CICS Task.  This fails with a USERID_NOT_MUTABLE error.
  

Problem conclusion

• CICS has been updated to allow Liberty to correctly set the
  userid on this transaction for unclassified work.  Additional
  trace entries have also been added to improve debugging of
  further problems in this area.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI55539 UI55540 UI55541 UI55542 UI55543 UI55544

Modules/Macros

• DFHAMSJ  DFHAPJVM DFHAXIS2 DFHCDJNI DFHEIQSY DFHMNXM  DFHPGLE
  DFHPGPG  DFHPGXE  DFHPIWR  DFHRLRO  DFHSJBD  DFHSJDM  DFHSJDS
  DFHSJDUF DFHSJIT  DFHSJJS  DFHSJJST DFHSJL   DFHSJRL  DFHSJSC
  DFHSJST  DFHSJTH  DFHSTP   DFHXMIQ  DFJ@H356 DFJ@H360 DFJ@H387
  DFJ@H417 DFJ@H427 DFJ@H448 DFJ@H467 DFJ@H468 DFJDTCOE DFJOUTRE
  DFJWLPPL
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI55539

     UP18/04/28 P F804

• R003 PSY UI55541

     UP18/05/01 P F804

• R00D PSY UI55540

     UP18/05/01 P F804

• R100 PSY UI55542

     UP18/04/28 P F804

• R103 PSY UI55544

     UP18/05/01 P F804

• R10D PSY UI55543

     UP18/04/28 P F804

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.