A fix is available
APAR status
Closed as program error.
Error description
CICS is not passing the APPL parameter on the VERIFYX call it uses to change a password (which is what the set of input parameters request CICS to do). APPL is not relevant when changing a password so it has never been passed. If the VERIFYX call was actually part of a SIGNON for an MFA user then MFABYPASS checking cannot be successful due to the missing APPL parameter.
Local fix
No local fix
Problem summary
**************************************************************** * USERS AFFECTED: All. * **************************************************************** * PROBLEM DESCRIPTION: CICS signon using Multi-Factor * * Authentication BYPASS may not work. * * A DFHXSnnnn message may be issued. * **************************************************************** In the reported problem, Multi-Factor Authentication (MFA) was being used but the user wanted to exclude some users from MFA by using the RACF MFABYPASS.APPL.* profile updated accordingly with users who could bypass MFA. This mechanism failed and would usually be accompanied with an DFHXSnnnn error message. A RACROUTE VERIFYX call from DFHXSSB code was made but RACF required the APPLID parameter which was not provided.
Problem conclusion
DFHXSSB has been modified and will now pass to RACF, the APPLID parameter on the appropriate RACROUTE VERIFYX call.
Temporary fix
Comments
APAR Information
APAR number
PI86512
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
000
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2017-08-30
Closed date
2017-11-07
Last modified date
2017-12-02
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI51720 UI51721
Modules/Macros
DFHXSSB
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
02 December 2017