IBM Support

PM93539: CEX ISSUES RACROUTE CALL WHEN CLIENT SENDS A BLANK USERID AND/OR PASSWORD.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • CEX issues a RACROUTE call when the client sends a blank
    USERID and/or password. IMS Connect issues message HWSP1503E for
    this condtion.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of IMS Connect Extentions V2.3         *
    ****************************************************************
    * PROBLEM DESCRIPTION: CEX issues a RACROUTE call when the     *
    *                      client sends a blank USERID and/or      *
    *                      password                                *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The following issues are being addressed in this APAR:
    1.CEX issues RACROUTE call when the client sends a blank USERID
    and/or password. IMS Connect issues message HWSP1503E for
    this condition.
    2.Correct event record description for events 2050,2053,2055
    and 2056.
    3.Correct capitalization in messages introduced with APAR
    PM76242.
    4.It can be hard to diagnose security errors due to passwords
    being masked. Errors such as blank or null passwords are hard
    to determine.
    

Problem conclusion

  • The following changes have been made for the above issues:
    1.Changed the CEX code to emulate the processing of IMS Connect
    for this condition by issuing message CEX5592E Security
    violation, no RACROUTE call when either the USERID and/or
    the PASSWORD is blanks or nulls.
    2.Change user macro definitions shipped for CEXR2050, CEXR2053,
    CEXR2054.CEXR2055 and CEXR2056.
    3.Change message text for CEX5580W, CEX5583I and CEX5585W.
    4.Add diagnostic flag to events 63 and 64 containing
    information about CEX security. This only added when CEX
    is providing security.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM93539

  • Reported component name

    IMS CONNECT EXT

  • Reported component ID

    5655K4800

  • Reported release

    230

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2013-07-22

  • Closed date

    2013-09-16

  • Last modified date

    2013-10-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UK97581

Modules/Macros

  •    CEX#TXCC CEX#TXTE CEXACL10 CEXAPMT1 CEXCERE
    CEXCOLLV CEXCONS  CEXCONSJ CEXCR62  CEXCR63  CEXCR64  CEXCSFB
    CEXDFN1  CEXEVTPR CEXEVTSR CEXEVT01 CEXEXRTR CEXINTST CEXMAIN
    CEXMSGCM CEXMSGL  CEXMSGT  CEXPRTSR CEXROUT0 CEXR2050 CEXR2053
    CEXR2054 CEXR2055 CEXR2056 CEXR256  CEXR257  CEXTECL  CEXTEOT
    CEXTPLST CEXVUSER H28S230J
    

Fix information

  • Fixed component name

    IMS CONNECT EXT

  • Fixed component ID

    5655K4800

Applicable component levels

  • R230 PSY UK97581

       UP13/09/19 P F309

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Line of Business":{"code":null,"label":null},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCX88S","label":"IMS Connect Extensions"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"2.3.0"}]

Document Information

Modified date:
14 December 2020