IBM Support

PH38067: IBM EXPLORER FOR Z/OS V3.1 (ZEXPL) FEKAPPL AUTHENTICATION ERROR USING RSEAPI

A fix is available

Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • IBM Explorer for z/OS v3.1 (zExpl) FEKAPPL authentication error
using RSEAPI. Connection using RSED (used by z/OS Explorer and
IBM Developer for Z) works fine using the same definition.

server log
server failure: Authentification Failed (8:34:0)

syslog
ICH408I USER(userid  ) GROUP(group   ) NAME(name    )
   LOGON/JOB INITIATION - NOT AUTHORIZED TO APPLICATION FEKAPPL


This problem only occurs if there is a catch-all profile in the
APPL class that denies access, as RSEAPI does not properly check
for the FEKAPPL profile

Local fix

  • As temporary bypass, you can grant users read permit to FEKAPPL*
instead of FEKAPPL

Problem summary

  • ****************************************************************
* USERS AFFECTED: 01.all RSEAPI users                          *
****************************************************************
* PROBLEM DESCRIPTION: 01.FEKAPPL authentication error using   *
*                         RSEAPI                               *
****************************************************************
01.IBM Explorer for z/OS (zExpl) FEKAPPL authentication error
   using RSEAPI. Connection using RSED (used by z/OS Explorer
   and IBM Developer for Z) works fine using the same
   definition.

   server log: server failure: Authentification Failed (8:34:0)

   syslog: ICH408I USER(userid) GROUP(group) NAME(name)
   LOGON/JOB INITIATION - NOT AUTHORIZED TO APPLICATION FEKAPPL

   This problem only occurs if there is a catch-all profile in
   the APPL class that denies access, as RSEAPI does not
   properly check for the FEKAPPL profile.

Problem conclusion

  • 01.pad APPLID before passing it to security manager

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    PH38067
    • 

  • Reported component name
    EXP FOR Z/OS HO
    • 

  • Reported component ID
    5655EXP23
    • 

  • Reported release
    310
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2021-06-11
    • 

  • Closed date
    2021-07-30
    • 

  • Last modified date
    2021-09-01
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Modules/Macros


    

  • FEJENF70 FEJJCNFG FEJJJCL  FEJJMON  FEJTSO   FEK1SMPE FEK2RCVE
FEK3ALOC FEK4ZFS  FEK5MKD  FEK6DDEF FEK7APLY FEK8ACPT FEK@CERR
FEK@CONE FEK@CONF FEK@CUST FEK@DEB  FEK@DESC FEK@FLOW FEK@GEN
FEK@GENW FEK@ISPF FEK@IVP  FEK@IVPD FEK@IVPW FEK@JCN1 FEK@JCNE
FEK@JESJ FEK@MAIN FEK@MIGO FEK@OPTE FEK@OPTG FEK@OPTN FEK@PRIM
FEK@RSE1 FEK@RSEO FEK@STRT FEK@TAB1 FEK@TAB2 FEK@TAB3 FEK@WRK1
FEK@WRK2 FEK@WRK3 FEK@WRK4 FEK@WRK5 FEKAPPCC FEKAPPCL FEKAPPCX
FEKATTR  FEKDSI   FEKEESX0 FEKFASIZ FEKFATT1 FEKFBLD  FEKFCIPH
FEKFCLIE FEKFCMOD FEKFCMPR FEKFCMSG FEKFCOMM FEKFCOPY FEKFCOR6
FEKFCORE FEKFDBBF FEKFDBBP FEKFDBG  FEKFDBG6 FEKFDBGM FEKFDIR
FEKFDIR6 FEKFDIVP FEKFDST0 FEKFDST1 FEKFDST2 FEKFENVF FEKFENVI
FEKFENVP FEKFENVR FEKFENVS FEKFEPL  FEKFICUL FEKFISPF FEKFIVP0
FEKFIVPA FEKFIVPD FEKFIVPI FEKFIVPJ FEKFIVPT FEKFJESM FEKFJESU
FEKFJVM  FEKFLATR FEKFLDSI FEKFLDSL FEKFLEOP FEKFLOGS FEKFLPTH
FEKFMAI6 FEKFMAIN FEKFMINE FEKFMINS FEKFMNTL FEKFNTCE FEKFOMVS
FEKFPATT FEKFPRDS FEKFPTC  FEKFRIVP FEKFRMSG FEKFRSES FEKFRSRV
FEKFSCMD FEKFSEND FEKFSSL  FEKFSTUP FEKFT000 FEKFT001 FEKFT002
FEKFT003 FEKFT004 FEKFT005 FEKFT006 FEKFT007 FEKFT008 FEKFT009
FEKFT010 FEKFT011 FEKFT012 FEKFT013 FEKFT014 FEKFT015 FEKFT016
FEKFT017 FEKFT018 FEKFT019 FEKFT020 FEKFT021 FEKFT022 FEKFT023
FEKFT024 FEKFT025 FEKFT026 FEKFT028 FEKFT029 FEKFT030 FEKFTIVP
FEKFTRKS FEKFTSO  FEKFUTIL FEKFVERS FEKFXITA FEKFXITL FEKFZME
FEKFZMF  FEKFZOS  FEKHCONF FEKHCUST FEKHDEB  FEKHDESC FEKHFLOW
FEKHGEN  FEKHISPF FEKHIVP  FEKHIVPD FEKHJESJ FEKHMAIN FEKHMIGO
FEKHOPTE FEKHOPTN FEKHPRIM FEKHRSE1 FEKHRSEO FEKHSTRT FEKHTAB1
FEKHTAB2 FEKINIT  FEKKEYS  FEKLOGR  FEKLOGS  FEKM00   FEKM01
FEKM02   FEKMKDIR FEKMOUNT FEKMSGC  FEKMSGS  FEKRACF  FEKRSED
FEKSAPF  FEKSAPPL FEKSBPX  FEKSCLAS FEKSCLOG FEKSCMD  FEKSCPYM
FEKSCPYU FEKSDSN  FEKSENV  FEKSETUP FEKSISPF FEKSJCFG FEKSJCMD
FEKSJMON FEKSLPA  FEKSPROG FEKSPTKT FEKSRSED FEKSSERV FEKSSTC
FEKSSU   FEKSUSER FEKXCFGE FEKXCFGI FEKXCFGM FEKXCFGT FEKXMAIN
FEKXML

    



Fix information


    

  • Fixed component name
    EXP FOR Z/OS HO
    • 

  • Fixed component ID
    5655EXP23
    • 



Applicable component levels


    

  • R310  PSY  UI76533
       UP21/08/06  P  F108
    • 



Fix is available


    

  • Select the PTF appropriate for your component level.
You will be required to sign in. Distribution on physical
media is not available in all countries.
    








      
              
                            

              

              [{"Line of Business":{"code":"LOB35","label":"Mainframe SW"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSBDYH","label":"IBM Explorer for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310"}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            02 September 2021
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback