A fix is available
APAR status
Closed as program error.
Error description
An optimized web attach of a transaction is failing with a security violation against the region userid. In this instance, transaction CWWU was being attached. Transaction CWWU is a category 2 transaction so it is unexpected for a security check to occur for the region userid. The optimized web attach processing is being used with basic authentication where the supplied userid and password combination is not valid. This causes DFHWBXM to not set any user token and not set a deferred abend or message. Thus, the transaction attach security check gets performed against the region userid. Following are the messages and return codes seen in this scenario: DFHXS1201 The password supplied in the verification request for userid (xxxxxxxx) was invalid. This occurred in transaction CWWU when userid (regionuserid) was signed on at netname ????????. DFHXS1111 CWWU Security violation by user (regionuserid) for resource CWWU in class TCICSTRN. SAF codes are (X'00000008',X'00000000'). ESM codes are (X'00000008',X'00000000'). RACF request made was FASTAUTH. DFHAC2003 Security violation has been detected term id = ????, trans id = CWWU, userid = (regionuserid). Additional Symptom(s) Search Keyword(s): KIXREVDAM
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All * **************************************************************** * PROBLEM DESCRIPTION: The optimized web attach processing is * * being used with basic authentication * * and the supplied userid and/or password * * combination is not valid. In this case * * DFHWBXM continues processing with an * * invalid user token and uses the region * * userid for the security check. * **************************************************************** Web basic authentication uses the region userid when and invalid userid / password combination is received.
Problem conclusion
DFHWBXM has been changed to prevent the error with the region User ID security check.
Temporary fix
Comments
APAR Information
APAR number
PH05249
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
000
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
YesSpecatt / CST / Xsystem
Submitted date
2018-11-13
Closed date
2019-03-13
Last modified date
2019-04-05
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI61849 UI61850 UI61851
Modules/Macros
DFHWBXM
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
R000 PSY UI61850
UP19/03/15 P F903
R100 PSY UI61849
UP19/03/15 P F903
R200 PSY UI61851
UP19/03/19 P F903
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.3","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
05 April 2019