A fix is available
APAR status
Closed as program error.
Error description
After connecting to a CMCI server from CICS Explorer, the 'Aggregate Records' button is greyed with the text 'not supported on server'. The following messages appear in the MSGUSR data set: DFHSJ1412E 09/01/2023 07:41:43 appl_id user_id JVMSERVER EYUCMCIJ ACCESS TO THE CMCI SERVER DENIED. USER-AGENT IS NOT IN ALLOW LIST. ''. DFHSJ0904 09/01/2023 07:41:43 appl_id usrer_id ???? CWGQ DFHSJTHP EXCEPTION 'COM.IBM.CICS.DRAKE.CPSM.HTTP.CMCIEXCEPTION: YOUR SYSTEM ADMINISTRATOR HAS NOT ENABLED THIS VERSION OF THE CLIENT TO CONNECT TO THIS SERVER'. OCCURRED CREATING OBJECT REFERENCE FOR CLASS COM.IBM.CICS.WLP.IMPL.CICSHTTPRUNNABLE. DFHAC2236 09/01/2023 07:41:43 appl_id TRANSACTION CWGQ TRANSACTION NUMBER 01286 ABEND AJ05 IN PROGRAM DFHSJTHP TERM ????. UPDATES TO LOCAL RECOVERABLE RESOURCES WILL BE BACKED OUT.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users. * **************************************************************** * PROBLEM DESCRIPTION: GraphQL is inaccessible on allowed * * user agents when a valid allowlist is * * defined. * **************************************************************** When trying to access the CMCI GraphQL interface with an allowlist defined, the user will be given the following error: "An internal server error occurred. Please contact your system administrator" This occurs when the user agent is valid and does not change even when a custom allowlist reject text is given. This means that features such as the 'aggregate records' button within CICS Explorer will also not work when an allowlist is defined. Also, using the property com.ibm.cics.jvmserver.cmci.user.agent.allow.list within a CMCI JVM server does not affect allowlist functionality because CICS was not correctly updated to change this property from com.ibm.cics.jvmserver.cmci.user.agent.white.list
Problem conclusion
The CMCI GraphQL interface no longer performs internal CMCI REST requests without a valid user agent string. CICS has also been updated to allow the property com.ibm.cics.jvmserver.cmci.user.agent.allow.list to work when defining an allowlist file. Logs referring to 'whitelist' also now correctly display as 'allowlist'.
Temporary fix
Comments
APAR Information
APAR number
PH58328
Reported component name
CICS TS Z/OS V6
Reported component ID
5655YA100
Reported release
400
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2023-11-22
Closed date
2023-12-21
Last modified date
2024-01-02
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI95040
Modules/Macros
DFHMESJC DFHMESJE DFHMESJK DFJ@H526 DFJ@H531 DFJ@H532 DFJ@H533 DFJ@H583
Fix information
Fixed component name
CICS TS Z/OS V6
Fixed component ID
5655YA100
Applicable component levels
R400 PSY UI95040
UP23/12/22 P F312
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.1","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]
Document Information
Modified date:
02 January 2024