IBM Support

PI86512: CICS IS NOT PASSING THE APPL PARAMETER ON THE VERIFYX CALL IT USES TO CHANGE A PASSWORD

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • CICS is not passing the APPL parameter on the VERIFYX call it
    uses to change a password (which is what the set of input
    parameters request CICS to do).  APPL is not relevant when
    changing a password so it has never been passed.
    
    If the VERIFYX call was actually part of a SIGNON for an MFA
    user then MFABYPASS checking cannot be successful due to the
    missing APPL parameter.
    

Local fix

  • No local fix
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All.                                         *
    ****************************************************************
    * PROBLEM DESCRIPTION: CICS signon using Multi-Factor          *
    *                      Authentication BYPASS may not work.     *
    *                      A DFHXSnnnn message may be issued.      *
    ****************************************************************
    In the reported problem, Multi-Factor Authentication (MFA) was
    being used but the user wanted to exclude some users from MFA
    by using the RACF MFABYPASS.APPL.* profile updated accordingly
    with users who could bypass MFA.
    This mechanism failed and would usually be accompanied with an
    DFHXSnnnn error message. A RACROUTE VERIFYX call from DFHXSSB
    code was made but RACF required the APPLID parameter which
    was not provided.
    

Problem conclusion

  • DFHXSSB has been modified and will now pass to RACF, the APPLID
    parameter on the appropriate RACROUTE VERIFYX call.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI86512

  • Reported component name

    CICS TS Z/OS V5

  • Reported component ID

    5655Y0400

  • Reported release

    000

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-08-30

  • Closed date

    2017-11-07

  • Last modified date

    2017-12-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI51720 UI51721

Modules/Macros

  • DFHXSSB
    

Fix information

  • Fixed component name

    CICS TS Z/OS V5

  • Fixed component ID

    5655Y0400

Applicable component levels

  • R000 PSY UI51720

       UP17/11/17 P F711

  • R100 PSY UI51721

       UP17/11/17 P F711

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
02 December 2017