PI70500: DFHXS1201 THE PASSWORD SUPPLIED IN THE VERIFICATION REQUEST FOR USERID XX WAS INVALID IS IMPROPERLY ISSUED 17/01/26 PTF PECHANGE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• After migration from CICS TS 42, without the support of the
  Enhanced Password Algorithm (RACF APAR OA43999) to CICS TS V52,
  the passticket decoding is not working properly and result in
  the message:
  DFHXS1201 THE PASSWORD SUPPLIED IN THE VERIFICATION REQUEST FOR
  USERID aaaaaa WAS INVALID. THIS OCCURRED IN TRANSACTION tttt
  WHEN USERID user WAS SIGNED ON AT NETNAME nnnn
  .
  Customer is using GROUPID as part of the passticket decoding and
  the VERIFYX call introduced by the support of the Enhanced
  Password Algorithm is not containing the GROUPID.
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All CICS Users with PI21866 applied.                         *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * EXEC CICS SIGNON may fail when using passtickets.            *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * .                                                            *
  ****************************************************************
  When an application creates a passticket using userid,applid and
  groupid  an EXEC CICS SIGNON USERID(u) PASSWORD(passticket)
  GROUPID(g) is issued. CICS verifies the password without passing
  the GROUPID parameter to the ESM and so the validate
  of the passticket fails.
  

Problem conclusion

• UI22616 UI22618 UI25262 UI30325 UI24127 UI24130 UI25263 UI30326
  UI43780 UI43779
  DFHXSSB, DFHXSPW and DFHUSAD have been changed to allow
  passtickets to be verified using GROUPID.
  

Temporary fix

Comments

• ×**** PE17/05/09 FIX IN ERROR. SEE APAR PI79851  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PI74786 PI74896 UI44245 UI44246 UI44247 UI44248

Modules/Macros

• DFHESN   DFHISXS  DFHPITC  DFHSOSE  DFHSZREQ DFHUSAD  DFHWBSR
  DFHWBXN  DFHXSAD  DFHXSDM  DFHXSFL  DFHXSIS  DFHXSLU  DFHXSPW
  DFHXSPWT DFHXSRC  DFHXSSA  DFHXSSB  DFHXSSBT DFHXSTRI EYU0VBPC
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R900 PSY UI44247

     UP17/02/10 P F702 ­

• R800 PSY UI44245

     UP17/02/10 P F702 ­

• R90M PSY UI44248

     UP17/02/10 P F702 ­

• R80M PSY UI44246

     UP17/02/10 P F702 ­

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.