A fix is available
APAR status
Closed as program error.
Error description
After migration from CICS TS 42, without the support of the Enhanced Password Algorithm (RACF APAR OA43999) to CICS TS V52, the passticket decoding is not working properly and result in the message: DFHXS1201 THE PASSWORD SUPPLIED IN THE VERIFICATION REQUEST FOR USERID aaaaaa WAS INVALID. THIS OCCURRED IN TRANSACTION tttt WHEN USERID user WAS SIGNED ON AT NETNAME nnnn . Customer is using GROUPID as part of the passticket decoding and the VERIFYX call introduced by the support of the Enhanced Password Algorithm is not containing the GROUPID.
Local fix
n/a
Problem summary
**************************************************************** * USERS AFFECTED: * * All CICS Users with PI21866 applied. * **************************************************************** * PROBLEM DESCRIPTION: * * EXEC CICS SIGNON may fail when using passtickets. * **************************************************************** * RECOMMENDATION: * * . * **************************************************************** When an application creates a passticket using userid,applid and groupid an EXEC CICS SIGNON USERID(u) PASSWORD(passticket) GROUPID(g) is issued. CICS verifies the password without passing the GROUPID parameter to the ESM and so the validate of the passticket fails.
Problem conclusion
UI22616 UI22618 UI25262 UI30325 UI24127 UI24130 UI25263 UI30326 UI43780 UI43779 DFHXSSB, DFHXSPW and DFHUSAD have been changed to allow passtickets to be verified using GROUPID.
Temporary fix
Comments
×**** PE17/05/09 FIX IN ERROR. SEE APAR PI79851 FOR DESCRIPTION
APAR Information
APAR number
PI70500
Reported component name
CICS TS Z/OS V5
Reported component ID
5655Y0400
Reported release
900
Status
CLOSED PER
PE
YesPE
HIPER
YesHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2016-10-11
Closed date
2017-01-26
Last modified date
2017-05-09
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
DFHESN DFHISXS DFHPITC DFHSOSE DFHSZREQ DFHUSAD DFHWBSR DFHWBXN DFHXSAD DFHXSDM DFHXSFL DFHXSIS DFHXSLU DFHXSPW DFHXSPWT DFHXSRC DFHXSSA DFHXSSB DFHXSSBT DFHXSTRI EYU0VBPC
Fix information
Fixed component name
CICS TS Z/OS V5
Fixed component ID
5655Y0400
Applicable component levels
R900 PSY UI44247
UP17/02/10 P F702
R800 PSY UI44245
UP17/02/10 P F702
R90M PSY UI44248
UP17/02/10 P F702
R80M PSY UI44246
UP17/02/10 P F702
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.2","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.2","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
09 May 2017