OA63135: CKGRACF CMD COMPLETE DENY DOES NOT CHANGE THE STATUS OF THE QUEUED ASK COMMAND

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• CKGRACF CMD COMPLETE DENY does not change the status of the
  queued ASK command.
  
  This issue is also evident with CKGRACF CMD SECOND DENY.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Admin exploiting the        *
  *                 multiple authority function provided by      *
  *                 zSecure CKGRACF utility.                     *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure CKGRACF utility does not change *
  *                      the queued command status in cases      *
  *                      where a 'COMPLETE DENY' action is       *
  *                      applied against it (either via 'D'      *
  *                      action character in interactive mode or *
  *                      via the 'CMD COMPLETE DENY' CKGRACF     *
  *                      command.                                *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  When a queued RACF command is denied by authorized operator via
  user interface ('D' action character applied against queued
  command) or via 'CMD COMPLETE DENY' CKGRACF command, the status
  of the command is not changed that it still has ASK'ed status.
  A MSGCKG725I which begins with the text "Start-date cannot be
  earlier ..." might be issued as well.
  

Problem conclusion

• zSecure CKGRACF component has been modified so that it handles
  the 'CMD COMPLETE DENY' command properly.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ08719 UJ08758

Modules/Macros

• CKGCPIC  CKGENQ   CKGINC   CKGINPI  CKGMD5   CKGPCMD  CKGSRVI
  CKGTSO   CKGUSRD
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R240 PSY UJ08758

     UP22/07/08 P F207 ¢

• R250 PSY UJ08719

     UP22/07/09 P F207 ¢

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.