IBM Support

OA60925: RA.5.2 generates a CKGRACF command omitting "execute" for long RACF commands

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • RA.5.2 when a long RACDCERT command is generated, the 'execute'
    keyword is missing.
    

Local fix

  • Use option 1 to execute as a RACF command, instead of choosing
    option 2 to execute with CKGRACF.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Admin generating long       *
    *                 (>240 chars) RACF commands for execution via *
    *                 CKGRACF.                                     *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Admin generates an incomplete   *
    *                      CKGRACF command (without the 'execute   *
    *                      keyword') in cases where the RACF       *
    *                      command exceeds 240 chars and the user  *
    *                      wants to execute the command via        *
    *                      CKGRACF.                                *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When the "Confirmation" is not set to "1. None" and "Commands to
    generate" includes "CKGRACF commands" (SE.4 panel), and the user
    chooses option 2 on the confirmation panel, the generated
    'CKGRACF CMD ...' command does not contain parameter 'execute'
    resulting in failure when the command is executed.
    

Problem conclusion

  • zSecure Admin has been modified so that it generates the
    'CKGRACF CMD EXECUTE ...' command properly.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA60925

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    240

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2021-02-22

  • Closed date

    2021-02-23

  • Last modified date

    2021-04-08

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ04924

Modules/Macros

  • C2RP3XCL
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R240 PSY UJ04924

       UP21/02/25 P F102

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"240"}]

Document Information

Modified date:
09 April 2021