PH58328: AGGREGATE RECORDS BUTTON IS GREYED OUT IN THE CICS EXPLORER

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• After connecting to a CMCI server from CICS Explorer, the
  'Aggregate Records' button is greyed with the text 'not
  supported on server'.
  
  The following messages appear in the MSGUSR data set:
  
  DFHSJ1412E 09/01/2023 07:41:43 appl_id user_id JVMSERVER
             EYUCMCIJ ACCESS TO THE CMCI SERVER DENIED.
             USER-AGENT IS NOT IN ALLOW LIST. ''.
  DFHSJ0904  09/01/2023 07:41:43 appl_id usrer_id ???? CWGQ
             DFHSJTHP EXCEPTION
             'COM.IBM.CICS.DRAKE.CPSM.HTTP.CMCIEXCEPTION:
             YOUR SYSTEM ADMINISTRATOR HAS NOT ENABLED THIS
             VERSION OF THE CLIENT TO CONNECT TO THIS SERVER'.
             OCCURRED CREATING OBJECT REFERENCE FOR CLASS
             COM.IBM.CICS.WLP.IMPL.CICSHTTPRUNNABLE.
  DFHAC2236  09/01/2023 07:41:43 appl_id TRANSACTION CWGQ
             TRANSACTION NUMBER 01286 ABEND AJ05 IN PROGRAM
             DFHSJTHP TERM ????. UPDATES TO LOCAL RECOVERABLE
             RESOURCES WILL BE BACKED OUT.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: GraphQL is inaccessible on allowed      *
  *                      user agents when a valid allowlist is   *
  *                      defined.                                *
  ****************************************************************
  When trying to access the CMCI GraphQL interface with an
  allowlist defined, the user will be given the following error:
  "An internal server error occurred. Please contact your system
  administrator"
  This occurs when the user agent is valid and does not change
  even when a custom allowlist reject text is given. This
  means that features such as the 'aggregate records' button
  within CICS Explorer will also not work when an allowlist is
  defined.
  
  Also, using the property
  com.ibm.cics.jvmserver.cmci.user.agent.allow.list within a CMCI
  JVM server does not affect allowlist functionality because CICS
  was not correctly updated to change this property from
  com.ibm.cics.jvmserver.cmci.user.agent.white.list
  

Problem conclusion

• The CMCI GraphQL interface no longer performs internal CMCI
  REST requests without a valid user agent string.
  
  CICS has also been updated to allow the property
  com.ibm.cics.jvmserver.cmci.user.agent.allow.list to work when
  defining an allowlist file. Logs referring to 'whitelist' also
  now correctly display as 'allowlist'.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PH57369

• APAR is sysrouted TO one or more of the following:

  UI95040

Modules/Macros

• DFHMESJC DFHMESJE DFHMESJK DFJ@H526 DFJ@H531 DFJ@H532 DFJ@H533
  DFJ@H583
  

Fix information

• Fixed component name

  CICS TS Z/OS V6

• Fixed component ID

  5655YA100

Applicable component levels

• R400 PSY UI95040

     UP23/12/22 P F312

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.