PM67213: USER ID IS REVOKED AFTER MULTIPLE CALLS TO ADMIN_TASK_ADD, WITH PASSTICKET, WITH DUPLICATE NAME

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• user ID is revoked after multiple calls to ADMIN_TASK_ADD, with
  PassTicket, with duplicate tasks and with unique tasks.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All DB2 9 for z/OS and DB2 10 for z/OS       *
  *                 users of the DB2-supplied stored procedure   *
  *                 SYSPROC.ADMIN_TASK_ADD.                      *
  ****************************************************************
  * PROBLEM DESCRIPTION: When a user calls the stored procedure  *
  *                      SYSPROC.ADMIN_TASK_ADD multiple times   *
  *                      specifying a PassTicket and the same    *
  *                      user ID (under which the new task is    *
  *                      performed), the specified user ID       *
  *                      might be revoked.                       *
  ****************************************************************
  * RECOMMENDATION: APPLY PTF                                    *
  ****************************************************************
  Currently, the password verification logic in
  SYSPROC.ADMIN_TASK_ADD causes a password violation to occur for
  the specified user if the specified password is a PassTicket.
  This causes the specified user ID to keep incurring a password
  violation each time ADMIN_TASK_ADD is called with a PassTicket,
  until the specified user's number of password violations exceeds
  the "maximum number of password attempts" allowed by the system,
  at which point the specified user's ID is revoked.
  

Problem conclusion

• The password verification logic in SYSPROC.ADMIN_TASK_ADD is
  modified to avoid incurring a password violation when a
  PassTicket is used.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK81128 UK81129

Modules/Macros

• DSNA6II
  

Fix information

• Fixed component name

  DB2 OS/390 & Z/

• Fixed component ID

  5740XYR00

Applicable component levels

• RA10 PSY UK81128

     UP12/11/16 P F211

• R910 PSY UK81129

     UP12/11/16 P F211

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.