PM83597: MSGCEX5126E PASSWORD VALIDATION FAILED FOR USER XXXXXXX, SAF RETURN CODE=08/08/00

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• This APAR addresses several problems:
  1. Message CEX5126E Password validation failed when the
  remote client is sending a PASSTICKET as the users password and
  does not include the application name in either the IRM or OTMA
  headers.
  2. CEX is validating the Userid and Password for a sync callout
  response. This is incorrect as the response is considered a data
  transmission not a transaction.
  3. Complete CEX DRAIN AUTORESUME processing now that IMS Connect
  APAR PM72077 is available for IMS Connect V11.
  4.  Initial toleration for IMS V13 needed so that CEX Service
  exit CEXSVC01 will return the identification strings at the
  proper exit parm address. This results in MSGHWS1480E being
  issued by IMS Connect.  ( HWS1480E )
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of IMS Connect Extentions V2.3         *
  ****************************************************************
  * PROBLEM DESCRIPTION: MSGCEX5126E PASSWORD VALIDATION         *
  *                      FAILED FOR USER XXXXXXX,                *
  *                      SAF RETURN CODE=08/08/00                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  This APAR is addressing the following issues:
  1.Msg CEX2156E Password validation failed when the remote client
  is sending a PASSTICKET as the users password and does not
  include the application name in either the IRM or OTMA headers.
  2.CEX is validating the Userid and Password for a sync callout
  response. This is incorrect as the response is considered a
  data transmission not a transaction.
  3.Complete CEX DRAIN AUTORESUME processing now that IMS
  Connect APAR PM72077 is available for IMS Connect V11.
  4.Initial tolleration for IMS V13 needed so that CEX Service
  exit CEXSVC01 will return the identification strings at the
  proper exit parm address.
  This results in Msg HWS1480E being issued by IMS Connect.
  5.The CEX service exit CEXSVC01 does not ensure that data
  sent by a client properly classifies the data as character
  or binary.
  6.Message CEX5126E for security violation is not being
  directed to the joblog.
  7.IMS Connect V12 APAR PM33388 added the variable section to
  event 68 and CEX did not include the section in the event
  record description.
  **  Additional information for issue #1 above **
  For CEX to be able to use the APPLNAME from the ICON
  configuration file, the datastore MUST be defined to CEX.
  If the datastore is not defined to CEX, CEX5126E 'Password
  validation failed for user xxxxxxxx, SAF return code=08/08/00'
  may be issued.
  

Problem conclusion

• The following changes have been made for the above issues:
  1.CEX security was not properly using the APPL=name value on
  the target DATASTORE statement when the application name is
  not included with the transaction. Correct CEX to use the
  DATASTORE APPL=name when application name is not included in
  the inbound message.
  2.Removed security checking for inbound sync callout responses.
  3.Completed implementation of AUTORESUME now that supporting
  code is available from IMS.
  4.Changed module CEXEXRTR to identify IMS V13 and set the proper
  release vectors.
  5.Changed CEXSVC01 to verify the proper classification of user
  user data to be logged and set the type to binary if not
  properly classified by user.
  6.Changed routing of message CEX5126E to route to the joblog
  for automated operations use.
  7.Included the variable section in event 60 record dsect.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK93089

Modules/Macros

• CEXACLR1 CEXACL10 CEXCDSB  CEXCR62  CEXCR68
  CEXCTPB  CEXEVTPR CEXEXRTR CEXINTST CEXIVP01 CEXMSGL  CEXMSGT
  CEXPRED0 CEXPRED1 CEXSALUT CEXSTCKN CEXSTUBS CEXSVC01 CEXTECL
  CEXTECL1 CEXTPXML CEXVUSER
  

Fix information

• Fixed component name

  IMS CONNECT EXT

• Fixed component ID

  5655K4800

Applicable component levels

• R230 PSY UK93089

     UP13/04/05 P F304

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.