PI86306: ORF: TOSI COMMAND SECURITY SUPPORT

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• This enhancement enables TOSI command security for ORF. TOSI is
  to perform system authorization facility (SAF) authorization for
   the IMS type-1 commands issued by ORF.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of IBM IMS Database Solution Pack V2.1 *
  *                 IMS Online Reorganization Facility           *
  ****************************************************************
  * PROBLEM DESCRIPTION: Enable TOSI command authorization       *
  *                      checking under ORF                      *
  ****************************************************************
  * RECOMMENDATION: Apply the maintenance for this APAR.         *
  ****************************************************************
  This APAR enables TOSI command authorization checking under ORF.
  The following APAR must be applied to IBM Tools Base Version 1
  Release 5 (FMID: HAHN150):
   PI84060 - IMS COMMAND AUTHORIZATION CHECKING IS NOT EFFECTIVE
    ON TOSI UNDER ORF JOBS WHEN RACFCHK=YES IS CONFIGURED
  If both the ORF and TOSI APARs are applied and RACFCHK=YES is
  configured for a TOSI server, TOSI client performs SAF (System
  Authorization Facility) authorization for all the IMS type-1
  commands issued by ORF.
  

Problem conclusion

Temporary fix

Comments

• ========================
  = DOCUMENTATION CHANGE =
  ========================
  The IBM IMS Database Solution Pack for z/OS Version 2 Release 1
  IMS Online Reorganization Facility User's Guide (SC19-4103-02)
  ----------------------------------------------------------------
  > Troubleshooting
  >> Messages and codes
  >>> Messages
  The following new messages have been added:
  HRF01584E Unexpected return code from TOSI client, MOD=module,
   FUNC=function, RC=rc, RSN=rsn
  Explanation: The IMS Tools Base IMS Tools Online System
   Interface (TOSI) client returned an unexpected return code.
   module is the module name, function is the function code, and
   rc is the return code.
  System action:  Processing terminates.
  User response:  Report the problem to IBM Software Support.
  
  HRF01585E TOSI command security check failed for imsid,
   CLASS=class, COMMAND=command
  Explanation: The IMS Online Reorganization Facility job is not
   authorized to execute the indicated command on the IMS
   subsystem imsid. class is the security class that is used on
   the IMS subsystem.
  System action:  Processing terminates.
  User response:  Make sure that your user ID has the required
   authority to issue the command.
  ----------------------------------------------------------------
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI50682

Modules/Macros

•    HRFOLEV0 HRFOREOD HRFOREO2 HRFOXCF  HRFYMSGT
  

Fix information

• Fixed component name

  IM DB SOLUTION

• Fixed component ID

  5655S7700

Applicable component levels

• R210 PSY UI50682

     UP17/09/29 P F709

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.