A fix is available
APAR status
Closed as program error.
Error description
Using CICS 5.5 and using the automatically created MQMONITOR resource called DFHMQINI, it is running under the CICS default id. Additional Symptoms and Keywords: DFHXS1111 Tranid Security violation by user DFLTUSER or resource Tranid in class Classname. SAF Codes are (X'00000008, X'00000000'). ESM codes are (X'00000008 , X'00000000'). RACF request made was FASTAUTH. You may also experience message DFHAC2003 Security violation has been detected by term id = ????, trans id = Tranid, userid=CICSUSER. After migration to CICS TS 5.4 or 5.5, your Tranid is run under DFLTUSER, the CICS region default userid. DFHMQMNT DFHMQINI target_userid dfhmqmnt target userid dfhmqmnt.target_userid dfhmqmnt.target
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All users * **************************************************************** * PROBLEM DESCRIPTION: The CICS dynamically created MQMONITOR, * * DFHMQINI, is using an unwanted * * userid when starting user transactions. * * It is not possible to install a * * DFHMQINI MQMONITOR as disabled to * * prevent CICS from automatically * * starting the MQMONITOR when CICS * * connects to IBM MQ. * * * **************************************************************** The user attribute of the CICS dynamically created MQMONITOR DFHMQINI defaults to the CICS default userid which may not be authorised to access application resources. Also the MQMONITOR is automatically started when CICS connects to IBM MQ and this prevents using the CKQC transaction to start an instance of the CKTI transaction to process the IBM MQ queue specified using the INITQ attribute of the MQCONN definition.
Problem conclusion
The code introduced by this APAR provides the user with the ability to define their own DFHMQINI resource thereby overriding the default Austostart, Status, UserId and Monuserid attributes. If the resource is defined as either Noautostart or Disabled the MQMONITOR is not automatically started when CICS connects to IBM MQ.
Temporary fix
Comments
APAR Information
APAR number
PH19015
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
200
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2019-11-08
Closed date
2019-12-04
Last modified date
2020-01-28
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI66764 UI66765
Modules/Macros
DFHBAM55 DFHCAPB DFHCAPC DFHEMT28 DFHESP28 DFHMEAMC DFHMEAME DFHMEAMK DFHMECAC DFHMECAE DFHMECAK DFHMQTM DFHSPMQB DFHSPMQC DFHSPMQE
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.5","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.5","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
28 January 2020