A fix is available
APAR status
Closed as program error.
Error description
Orphaned VITBs due to userid not authorized for COVA. When a user not authorized for COVA tries to connect on WUI, he receives EYUVC1014E Unable to create User environment. Failure during user task creation. For this connection a VITB is allocated with FF000000 in vitb_vktb_ptr. This value in vitb_vktb_ptr is a temporay status to avoid a potentiel race condition (dyu0vits.design). In WUI msgusr, security violation message is received: DFHXS1111 02/03/2010 13:54:44 CICS1WUI COVA Security violation by user CICSBID for resource COVA in class TCICSTRN. SAF codes are (X'00000008',X'00000000'). ESM codes are (X'00000008',X'00000000'). but VITB is not deallocated. Timeout routine and COVC (option 4 User sessions) bypass this VITB with code: if (vitb_vktb_ptr = 0) & Not unallocated and ... (vitb_vktb_ptr = 'FF000000'X) ... not allocated but ASLRT uninitialised and VITB is never deallocated. WUI region must be recycled to deallocated this VITB. If this user retries many times, all VITB can be allocated with this status and Maximum user limit can be reached, message: EYUVS0030E EYUWUIE1 Signon rejected. Maximum user limit (5) reached. Customer got problem at CICS TS 3.2, same problem on our TS 4.1.
Local fix
To stop and restart the WUI .
Problem summary
**************************************************************** * USERS AFFECTED: All CICSPlex SM V3R2M0 Users * **************************************************************** * PROBLEM DESCRIPTION: A user not authorized for COVA tries * * to connect to the WUI. The following * * message is sent to the browser: * * . * * EYUVC1014E Unable to create User * * environment. Failure during * * user task creation. * * . * * After this user retries many times, * * message: * * . * * EYUVS0030E Signon rejected. Maximum * * user limit (nn) reached. * * . * * is issued for each additional signon * * attempt. * **************************************************************** * RECOMMENDATION: After applying the PTF that resolves this * * APAR, all MASes which act as Web User * * Interface (WUI) servers must be recycled * * to pick up the updated code. Note that * * all servers do not have to be restarted at * * the same time. * **************************************************************** During server initialization a pool of User Task Blocks (VITBs) is allocated. The number of available blocks is set by the MAXUSERS WUI system parameter. When a user signon is processed, a VITB is taken from the pool and initialized for the user. An API Service Long Running Task (ASLRT - COVA Transaction) is then started for the user. If the START for the COVA transaction fails, or the START returns RESP=NORMAL but the task is not started, a trace is written and message EYUVC1013E or EYUVC1014E is issued, but the assigned VITB is not returned to the free pool. After a number of tries, the pool of VITBs might become exhausted, preventing additional WUI users from signing on.
Problem conclusion
Module EYU0VITA (VITA - Add WUI User Environment) has been modified to release the acquired VITB if the START for trans- action COVA fails. A new flag was added to the request element for EYU0VITD (VITD - Delete User Environment) requesting that an uninitialized VITB be purged, and EYU0VPSN (VPSN - Protected Signon Proxy) was modified to pass a request element to VITD with the purge flag set to return the inactive VITB to the free pool, if an API Service LRT (ASLRT) was not started.
Temporary fix
********* * HIPER * ********* FIX AVAILABLE BY PTF ONLY
Comments
APAR Information
APAR number
PM06995
Reported component name
CICSTS V3 Z/OS
Reported component ID
5655M1500
Reported release
50M
Status
CLOSED PER
PE
NoPE
HIPER
YesHIPER
Special Attention
NoSpecatt
Submitted date
2010-02-08
Closed date
2010-03-12
Last modified date
2010-04-02
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
PM07008 UK55175
Modules/Macros
DYU0VGAI DYU0VITS DYU0VPHI DYU0VPSN EYUBVITD EYUBVITS EYU0VGAI EYU0VITA EYU0VITD EYU0VITK EYU0VITL EYU0VPHI EYU0VPSN
Fix information
Fixed component name
CICSTS V3 Z/OS
Fixed component ID
5655M1500
Applicable component levels
R50M PSY UK55175
UP10/03/16 P F003
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.2","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.2","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
02 April 2010