A fix is available
APAR status
Closed as program error.
Error description
The CICS supplied transaction list contains errors as it lists many transactions that do not have an associated category value. The category specifies the recommended security specifications you need, in terms of both the CICS transaction definitions and the corresponding RACF profiles Many of the transactions are obsolete and should be removed from the list however a few need to be updated to show the correct category level. The following transactions should have the following category value: CHLP = Category 2 CLER = Category 2 CPCT = Category 1 DFHXSRC needs to be updated to have CPCT listed as a Category 1 transaction. Additional Symptom(s) Search Keyword(s): KIXREVSWM
Local fix
N/A
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users. * **************************************************************** * PROBLEM DESCRIPTION: Transaction CPCT is defined in wrong * * security category. CHLP is not defined * * in any security category. * **************************************************************** * RECOMMENDATION: * **************************************************************** The customer reported that transactions CLER and CHLP are not in any security category. CPCT is a system attached task to do cataloging of persistent sessions so CPCT should be in category 1. CLER is a transaction supplied by LE to display and modify LE runtime options. CLER is recommended to be in category 2. CHLP is alias for CMAC so it should be in category 2 as CMAC.
Problem conclusion
DFH$CAT1 has been changed to add CPCT as category 1 transaction. DFH$CAT2 has been changed to add CHLP as category 2 transaction. DFHXSUT has been changed to add CPCT as system transaction. DFHXSRC has been changed to remove CPCT from category 3. CLER is LE supplied transaction so it is not defined in CICS. CICS Transaction Server for z/OS Version 4 Release 2 Supplied Transactions, SC34718401 has been altered in 'Table 10. CICS transactions supplied by IBM'. CPCT's security category is 1. CHLP's security category is 2. CLER is removed as it is an LE supplied transaction. CWBC and all obsolete transactions without security category are removed. The obsolete transactions include CATS, CAUT, CBRC, CCMF, CEOS, CEMS, CFTI, CFUP, CINS, CIRB, CIRD, CSGX, CSIR 160, CSJC, CSLG, CSMT, CSSN/CSST, CSSX, CSTA, CSTT, CVST, CWBM. CICS Transaction Server for z/OS Version 4 Release 2 Resource Definition Guide, SC34718101 has been altered in 'Table 63. CICS transactions supplied by IBM'. CPCT's security category is 1. CHLP's security category is 2. CLER is removed as it is an LE supplied transaction. CWBC and all obsolete transactions without security category are removed. The obsolete transactions include CATS, CAUT, CBRC, CCMF, CEOS, CEMS, CFTI, CFUP, CINS, CIRB, CIRD, CSGX, CSIR 160, CSJC, CSLG, CSMT, CSSN/CSST, CSSX, CSTA, CSTT, CVST, CWBM. CICS Transaction Server for z/OS Version 4 Release 2 RACF Security Guide, SC34717901 has been altered in 'Chapter 10. Security for CICS-supplied transactions'. CPCT is added in 'Table 15. Category 1 transactions' as: CPCT | DFHZPCT | DFHPSSGN | Catalog signed on terminals for persistent session signon retention CHLP is added in 'Table 16. Category 2 transactions' as: CHLP | DFHCMAC | DFHCMAC | Alias for CMAC
Temporary fix
FIX AVAILABLE BY PTF ONLY
Comments
APAR Information
APAR number
PM80426
Reported component name
CICS TS Z/OS V4
Reported component ID
5655S9700
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2013-01-11
Closed date
2013-05-12
Last modified date
2014-07-11
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
DFH$CAT1 DFH$CAT2 DFHXSDM DFHXSRC
| SC34718401 | SC34718101 | SC34717901 |
Fix information
Fixed component name
CICS TS Z/OS V4
Fixed component ID
5655S9700
Applicable component levels
R700 PSY UK94386
UP13/05/24 P F305
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.2","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"4.2","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
11 July 2014