PI79851: INSTALLATION DATA NOT PASSED TO RACF EXIT ICHRIX01 17/05/09 PTF PECHANGE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Customer makes use of RACF exit program ICHRIX01 to
  intercept passwordless signons.  After applying CICS
  maintenance from RSU1606 to RSU1612, they began to receive
  messages:
  ICH408I USER(userid) GROUP(groupname) NAME(user_name)
  LOGON/JOB INITIATION - INVALID PASSWORD ENTERED AT TERMINAL
  termid
  
  IRR013I  VERIFICATION FAILED. INVALID PASSWORD GIVEN.
  
  Problem is due to code added by  PI74896 where Register 2 is
  reused, causing  the pointer to installation data (INSTLN_PTR)
  to be lost.
  .
  Additional Symptom(s) Search Keyword(s): KIXREVSLD
  DFHXSSB  INQUIRE_PASSWORD_DATA INQUIRE PASSWORD DATA
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users with PTF's UI44245, UI44247   *
  *                 or UI44253 applied.                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: CICS Installation data not passed to    *
  *                      RACF.                                   *
  ****************************************************************
  If ESMEXITS=INSTLN is coded as a SIT parameter then CICS
  should pass Installation Data to the RACF ESM on the
  appropriate calls, it does this by using a register that
  addresses the installation data.
  
  The RACROUTE REQUEST=VERIFYX calls used for password
  verification and change password requests use a register that
  does not address installation data at all.
  The register contents was previously set up correctly but
  after PI70500 the compiler reused the register and in doing so
  invalidated it.
  As a consequence the RACF ICHRIX01 exit was unable to
  interpret the area it had received and the request failed.
  

Problem conclusion

• UI44245 UI44247 UI44253
  
  DFHXSSB has been modified and now correctly passes the address
  of the CICS installation data on the RACROUTE=VERIFYX calls.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI47090 UI47091 UI47092

Modules/Macros

• DFHXSSB
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R000 PSY UI47092

     UP17/05/15 P F705 ­

• R800 PSY UI47090

     UP17/05/15 P F705 ­

• R900 PSY UI47091

     UP17/05/15 P F705 ­

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.