A fix is available
APAR status
Closed as program error.
Error description
CICSTS32.CICS.SDFHSAMP(DFHᄑCAT1) and CICSTS32.CICS.SDFHSAMP(DFHᄑCAT2) incorrectly supply transactions CKTI and CKAM as CAT1 but should be CAT2 as they are in CICS TS 4.2 CICS TS 3.2 infocentre also has the wrong information.
Local fix
Define CKTI and CKAM as CAT2.
Problem summary
**************************************************************** * USERS AFFECTED: All CICS users. * **************************************************************** * PROBLEM DESCRIPTION: CKAM and CKTI were defined as Category * * 1 transactions, rather than Category 2 * * transactions. * **************************************************************** * RECOMMENDATION: * **************************************************************** In the CICS supplied sample CLIST, CKAM and CKTI are defined as Category 1 transactions, which indicates the two transactions are CICS system attached transactions. However in CICS, the two transactions are started either in the PLT processing phase or by the CKQC transaction. In either case, CKAM and CKTI are user initiated transactions, and so should be defined as Category 2.
Problem conclusion
DFH$CAT1 and DFH$CAT2 have been modified to move CKAM and CKTI from Category 1 transactions to Category 2 transactions. The CICS Transaction Server for z/OS Version 3 Release 2 RACF Security Guide, SC34-6835-03 has been altered in Chapter 10 ('Security for CICS-supplied transactions'). Under the heading of 'Category 1 transactions', CKAM and CKTI have been removed from Table 15 ('Category 1 transactions'). Under the heading of 'Category 2 transactions', 1. CKAM and CKTI have been added into Table 16 ('Category 2 transactions"). The new added rows for the table are: CKAM DFHMQMON DFHMQ 2 CICS-MQ Adapter alert monitor CKTI DFHMQTSK DFHMQ 2 CICS-MQ Adapter - task initiator transaction 2. In the fourth paragraph, the description for OPERATOR has been altered to say: "OPERATOR, containing: CBAM, CEOT, CEST, CIDP, CKAM, CKTI, CMSG, CRTE, CSFE, CWTO and DSNC" 3. In Figure 4 ('Example of defining groups for category 2 transactions'), CKAM and CKTI have been added as members of the profile OPERATOR. The profile definition for GCICSTRN OPERATOR has been altered to say: "RDEFINE GCICSTRN OPERATOR UACC(NONE) ADDMEM(CWTO,CRTE,CMSG,CEST,CEOT,CIDP,CSFE,DSNC,CBAM,CKAM,CKTI) NOTIFY(security_admin_userid) OWNER(userid or groupid)"
Temporary fix
FIX TOO LARGE FOR RETAIN, THE FIX MAY BE AVAILABLE IN DLL
Comments
APAR Information
APAR number
PM68210
Reported component name
CICSTS V3 Z/OS
Reported component ID
5655M1500
Reported release
500
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2012-07-05
Closed date
2012-09-03
Last modified date
2012-10-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
PM68220 UK81489
Modules/Macros
DFH$CAT1 DFH$CAT2
SC34683503 |
Fix information
Fixed component name
CICSTS V3 Z/OS
Fixed component ID
5655M1500
Applicable component levels
R500 PSY UK81489
UP12/09/07 P F209
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSGMGV","label":"CICS Transaction Server"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.2","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"3.2","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
01 October 2012