A fix is available
APAR status
Closed as program error.
Error description
If the user is an Express Logon Facility User and has both PWFALLBACK(YES)and MFAFIRST specified as 'Y' then in circumstances where ELF is unable to obtain a Cache Token Credential and generates a PassTicket, then the PassTicket will be evaluated by RACF successfully. MFA has been modified to ensure that RACF is inhibited from successfully evaluating the PassTicket in this scenario. *FIXCAT* MFA/K
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All Users. * **************************************************************** * PROBLEM DESCRIPTION: Correct a situation where a PassTicket * * is successfully evaluated when MFAFIRST * * is specified as 'Y' and the user has * * PWFALLBACK(YES) and the user has not * * successfully authenticated with MFA. * ****************************************************************
Problem conclusion
Temporary fix
Comments
APAR Information
APAR number
PI93341
Reported component name
MULTI-FACTOR AU
Reported component ID
565516201
Reported release
130
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2018-02-05
Closed date
2018-04-02
Last modified date
2018-05-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI54917 UI54918
Modules/Macros
AZFMSM85 AZFMSM90 AZFPTKT1 AZFSIDP1 AZFSTCMN
Fix information
Fixed component name
MULTI-FACTOR AU
Fixed component ID
565516201
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":null,"label":null},"Product":{"code":"SG19O","label":"APARs - MVS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"130","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNR6Z","label":"IBM Multi-Factor Authentication for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"130","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Document Information
Modified date:
01 May 2018