IBM Support

TSS0244E INVALID SUBFIELD LENGTH FOR KEYWORD - SPI for CICS WLMHEALTH resource

Question & Answer


Question

SPI(WLMHEALTH) in CA Top Secret returns message: TSS0244E INVALID SUBFIELD LENGTH FOR KEYWORD - SPI. In RACF, what is the resource name in the SPI check for WLM Health? I expect Top Secret's to be the same, but maybe RACF is using WLMHEALTH and thus, I would need to open a problem with CA Technologies.

In preparing for our initial deployment of CICS Transaction Sever for z/OS (CICS TS) V5.4, I have been working with my security team to get various permissions in place (CEDG, CEDY, CEPR, SPI check on MQMON, etc.). However, I am bit stuck on the SPI check for WLMHEALTH.

Hopefully, you have a simple answer though (like MQMON for the MQ Monitor).

Answer

First of all, ensure the PTFs for CICS Transaction Server for z/OS (CICS TS) V5.4 APARs PI84397 and PI83933 have been applied. These APARs affect command security checking for the WLMHEALTH resource. Prior to PI84397, the ASSOCIATION resource was being used instead of WLMHELATH.

See the CICS TS V5.4 Fix List for these APARs and their PTFs.

The command checking resource names are described in topic CICS resources subject to command security checking in the CICS TS V5.4 documentation

For CA Top Secret, the command resource names are limited to 8 characters in length, so for Top Secret, the resource would drop the trailing "H" and be defined as "WLMHEALT".

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Platform":[{"code":"PF035","label":"z\/OS"}],"Component":"Security","Version":""}]

Product Synonym

CICS/TS CICSTS CICS TS CICS Transaction Server

Document Information

Modified date:
27 October 2017

UID

dwa1407497