PH19015: CICS 5.5 TRANSACTION RUNNING UNDER CICS DEFAULT USERID, FAILS

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Using CICS 5.5 and using the automatically created MQMONITOR
  resource called DFHMQINI, it is running under the CICS default
  id.
  
  Additional Symptoms and Keywords:
  DFHXS1111 Tranid Security  violation by user DFLTUSER or
  resource Tranid in class Classname. SAF Codes are (X'00000008,
  X'00000000').  ESM codes are (X'00000008 , X'00000000').
  RACF request made was FASTAUTH.
  
  You may also experience message DFHAC2003  Security violation
  has been detected by term id = ????, trans id = Tranid,
  userid=CICSUSER.
  
  After migration to CICS TS 5.4 or 5.5, your Tranid is run under
  DFLTUSER, the CICS region default userid.
  
  DFHMQMNT DFHMQINI target_userid  dfhmqmnt target userid
  dfhmqmnt.target_userid    dfhmqmnt.target
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: The CICS dynamically created MQMONITOR, *
  *                      DFHMQINI, is using an unwanted          *
  *                      userid when starting user transactions. *
  *                      It is not possible to install a         *
  *                      DFHMQINI MQMONITOR as disabled to       *
  *                      prevent CICS from automatically         *
  *                      starting the MQMONITOR when CICS        *
  *                      connects to IBM MQ.                     *
  *                                                              *
  ****************************************************************
  The user attribute of the CICS dynamically created MQMONITOR
  DFHMQINI defaults to the CICS default userid which may not be
  authorised to access application resources. Also the MQMONITOR
  is automatically started when CICS connects to IBM MQ and this
  prevents using the CKQC transaction to start an instance of the
  CKTI transaction to process the IBM MQ queue specified using the
  INITQ attribute of the MQCONN definition.
  

Problem conclusion

• The code introduced by this APAR provides the user with the
  ability to define their own DFHMQINI resource thereby overriding
  the default Austostart, Status, UserId and Monuserid attributes.
  If the resource is defined as either Noautostart or Disabled the
  MQMONITOR is not automatically started when CICS connects to IBM
  MQ.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI66764 UI66765

Modules/Macros

• DFHBAM55 DFHCAPB  DFHCAPC  DFHEMT28 DFHESP28 DFHMEAMC DFHMEAME
  DFHMEAMK DFHMECAC DFHMECAE DFHMECAK DFHMQTM  DFHSPMQB DFHSPMQC
  DFHSPMQE
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R100 PSY UI66764

     UP19/12/06 P F912

• R200 PSY UI66765

     UP19/12/06 P F912

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.