OA61694: PROXY KEYWORD IS MISSING WHEN GENERATING AN RLIST FROM WITHIN ZSECURE LISTING OF RACF CLASS PROFILES

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• zSecure not properly RLISTing an LDAPBIND class profile
  
  When using zSecure Admin's functionality to review profiles in a
  class (for example RA.R, enter class of LDAPBIND, on display of
  profiles, enter an L beside one of the profiles to list the
  information using RACF). zSecure will generate a RACF command of
  RLIST classname profile.name. The needed PROXY statement on the
  generated command is missing for this LDAPBIND class and
  profile.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Admin exploiting the 'L'    *
  *                 (list profile) action character against      *
  *                 non-base segment profile entries listed on   *
  *                 displays.                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Admin might generate incomplete *
  *                      RACF 'rlist' command in response to the *
  *                      'L' (list profile) action character     *
  *                      used against listed non-base segment    *
  *                      profile entries.                        *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  When interactive report is generated using MERGELIST function
  where one of the newlists in the merge context selects non-base
  profile segments, the 'L' (list profile) action command applied
  to reported non-base segment profile entries generates
  incomplete RACF commands that lack segment specifications.
  

Problem conclusion

• zSecure Admin has been modified so that the 'L' (list profile)
  action command applied to a non-base segment profile entries
  generates correct 'rlist' commands.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ05996

Modules/Macros

• CKRPRLST GKRPRLST
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R240 PSY UJ05996

     UP21/08/02 P F107

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.