PI91657: CSL server support for CA Top Secret (TSS)

APAR status

• Closed as program error.

Error description

• 1. ACEE>255 bytes in length will cause CSL Server startup to
  terminate RC=0012 after issuing error message: FUN3002E with
  Feedback: 00A20013. On a TSS partition a standard ACEE exceeds
  255 bytes.
  2. The Security Server RACF service (IRRSEQ00) ADMN_XTR_SETR
  function used at CSL server startup fails SAFRC=8, RACRC=8,
  RACRSN=0 (i.e. Unknown function) on a TSS partition, resulting
  in a FUN3016E message being put out that may be confusing to
  users. The CSL server continues, using the default
  PASSWORD(MIXEDCASE), which is appropriate in this case.
  Summary of changes
  1. Support added for ACEE > 255 bytes
  2. CSL server error message FUN3016E is suppressed for the
  SAFRC=8, RACRC=8, RACRSN=0 (i.e. Unknown function) case.
  3. Various minor diagnostic data collection improvements have
  been introduced within the CSL server SAF interface process.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of IBM Common Services Library VA10    *
  ****************************************************************
  * PROBLEM DESCRIPTION: CSL server support for CA Top           *
  *                      Secret (TSS)                            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  1.ACEE>255 bytes in length will cause CSL Server startup to
     RC=0012 after issuing error message: FUN3002E with
     Feedback: 00A20013. On a TSS partition a standard
     ACEE exceeds 255 bytes.
  
  2.The Security Server RACF service (IRRSEQ00) ADMN_XTR_SETR
     function used at CSL server startup fails SAFRC=8,
     RACRC=8, RACRSN=0 (i.e. Unknown function) on a TSS partition,
     resulting in a FUN3016E message being put out that may be
     confusing to users. The CSL server continues, using the
     default PASSWORD(MIXEDCASE), which is appropriate in this
     case.
  
  3.CSL server security service initialization fails on a TSS
     partition immediately after receiving a TSS7100E message
     which indicates that ACID BTCHDEF is undefined.
  

Problem conclusion

• 1.Support added for ACEE > 255 bytes
  
  2.CSL server error message FUN3016E is suppressed for the
    SAFRC=8, RACRC=8, RACRSN=0 (i.e. Unknown function) case.
  
  3.Various minor diagnostic data collection improvements have
    been introduced within the CSL server SAF interface process.
  
  4.SAF VERIFY request issued as part of CSL server initialization
    has been modified to explicitly associate the request with
    the USERID in use by the CSL server job task.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI54366

Modules/Macros

•    FUNFUDID FUNM1ENU FUNSCNVQ FUNSINIT FUNSINTQ
  FUNSREQQ FUNSSEC  FUNSTERM
  

Fix information

• Fixed component name

  FUNC SUPP LIBRA

• Fixed component ID

  5655K4801

Applicable component levels