A fix is available
APAR status
Closed as program error.
Error description
RECORDDESC for SMF type 119(70) does not report AT-TLS. When the SMF 119(70) record has an SMF119FT_FSMechanism value of A for AT-TLS, the RECORDDESC field does not report this correctly.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: Users of zSecure Audit for ACF2 exploiting * * SMF reports. * **************************************************************** * PROBLEM DESCRIPTION: zSecure Audit does not reflect the * * AT-TLS protection mechanism in the * * descriptive string (the RECORDDESC * * CARLa field) related to the SMF record * * type 119, subtypes 3, 70, and 72. * **************************************************************** * RECOMMENDATION: Apply the PTF provided. * **************************************************************** When SMF records of type 119 (TCP/IP events), subtype 3 (FTP client transfer completion), 70 (FTP server transfer completion), and 72 (FTP server logon failure) have the protection/login mechanism field set to 'A' (AT-TLS), the zSecure Audit does not reflect that in the descriptive string (the RECORDDESC CARLa field).
Problem conclusion
zSecure Audit has been modified so that the AT-TLS protection mechanism is properly reported for SMF records type 119, subtype 3, 70, and 72 by the descriptive string (the RECORDDESC CARLa field).
Temporary fix
Comments
APAR Information
APAR number
OA62377
Reported component name
ZSEC BASE,ADMIN
Reported component ID
5655T0100
Reported release
240
Status
CLOSED PER
PE
YesPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2021-11-02
Closed date
2021-11-02
Last modified date
2021-12-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UJ06994 UJ06995
Modules/Macros
CKASMF77 GKRSMF77
Fix information
Fixed component name
ZSEC BASE,ADMIN
Fixed component ID
5655T0100
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"240"}]
Document Information
Modified date:
02 December 2021