VM18480: VARIOUS FIXES FOR CKRCARLA COMPAREOPT FUNCTION

A fix is available

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Multiple issues running the CKRCARLA COMPAREOPT function
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of zSecure Manager for RACF z/VM   *
    *                 exploiting compare processing.               *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Manager for RACF z/VM has       *
    *                      various issues regarding compare        *
    *                      processing.                             *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    zSecure Manager for RACF z/VM has various issues regarding
    compare processing:
     - a problem where the input data set type (RACF database,
       UNLOAD, CKFREEZE) is confused with the input data set
       security product (can be observed on CKR0615 message);
     - programming error that can result in MSGCKR1967 while SUMMARY
       CARLa statement is being processed;
    Beside that zSecure Manager for RACF z/VM compare processing has
    been improved to have a better notion of an allocated BASE input
    set, and better definitions for the default comparison
    properties (COMAREOPT CARLa statement) as used in the zSecure
    user interface.
    

Problem conclusion

  • zSecure Manager for RACF z/VM has been adjusted in order to have
    an improved and corrected comparison processing.
    -
    PLEASE NOTE the following documentation changes for
    Security zSecure Version 1.13 Messages Guide (SC14-7667-00).
    -
    Chapter 5. CKR messages
    
    Following messages have been added:
    
    CKR2427 Automatic compare ignored for newlist type=<type> at
            <ddname> line <line>.
    Severity: 0
    Explanation: An automatic compare was specified using
                 FUNCTION=BASE on an ALLOC statement, but this
                 newlist type does not support an automatic compare.
                 The newlist will be processed as if no
                 FUNCTION=BASE was specified on an ALLOC statement.
                 COMPARE_RESULT and COMPARE_CHANGES fields are
                 allowed, but will return a blank value. No
                 filtering will take place because of COMPAREOPT
                 SHOW processing.
    User response: To explicitly request that this newlist perform
                   a compare operation, you must define your own
                   compare operation. See "Compare processing" in
                   the User Reference Manual.
    
    CKR2428 Default compare requires compare fields in newlist
            type=<type> at <ddname> line <line>.
    Severity: 12
    Explanation: A compare was specified for this newlist type using
                 COMPAREOPT=DEFAULT on the NEWLIST statement.
                 However, the internal knowledge base is missing
                 fields to compare. To use this newlist to compare,
                 create a COMPAREOPT statement that defines which
                 fields to compare. You might also need to specify
                 the BY and BASE fields.
    User response: See "Compare processing" in the User Reference
                   Manual for information on creating comparison
                   operations.
    
    CKR2506 Internal error: automatic compare requires compare
            fields in newlist type=<type> at <ddname> line <line>.
    Severity: 24
    Explanation: The internal knowledge base for this newlist type
                 contains an inconsistency. It supports automatic
                 comparison, but it has no defined fields to
                 compare.
    User response: See the Electronic Support Web site for possible
                   maintenance associated with this message. If you
                   cannot find applicable maintenance, contact IBM
                   Software Support. You can still use this newlist
                   for comparing by creating a COMPAREOPT statement
                   with a correct compare specification. See
                   "Compare processing" in the User Reference Manual
                   for information on creating comparison
                   operations.
    
    CKR2507 Internal error: Default compare base field <field> not
            supported. (Only COMPLEX and SYSTEM.) Newlist
            type=<type>.
    Severity: 24
    Explanation: The internal knowledge base for this newlist type
                 contains an inconsistency. The indicated field is
                 defined as a base field, but only the COMPLEX and
                 SYSTEM fields are allowed as base fields.
    User response: See the Electronic Support Web site for possible
                   maintenance associated with this message. If you
                   cannot find applicable maintenance, contact IBM
                   Software Support. You can still use this newlist
                   for comparing by creating a COMPAREOPT statement
                   with a correct compare specification. See
                   "Compare processing" in the User Reference Manual
                   for information on creating comparison
                   operations.
    
    Following messages have been removed:
    
    CKR1464, CKR1473, and CKR1508.
    1B1Y
    CKAFDEF
    CKASMRD
    CKRADSN
    CKRALLOC
    CKRCOMP
    CKRFDEF
    CKRFLDT
    CKRINP@
    CKRINPA
    CKRINPE
    CKRMAIN
    CKROUFLD
    CKRSMMO
    CKRSYDB
    C2RDFLD
    

Temporary fix

Comments

APAR Information

  • APAR number

    VM18480

  • Reported component name

    TIV ZSECMGR-RAC

  • Reported component ID

    5655T1300

  • Reported release

    1B1

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2012-08-09

  • Closed date

    2012-10-16

  • Last modified date

    2012-10-31

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UV61175

Modules/Macros

  • CKAFDEF  CKASMRD  CKRADSN  CKRALLOC CKRCOMP
    CKRFDEF  CKRFLDT  CKRINP@  CKRINPA  CKRINPE  CKRMAIN  CKROUFLD
    CKRSMMO  CKRSYDB  C2RDFLD
    

Fix information

  • Fixed component name

    TIV ZSECMGR-RAC

  • Fixed component ID

    5655T1300

Applicable component levels

  • R1B1 PSY UV61175

       UP12/10/18 P 1210

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.



Rate this page:

(0 users)Average rating

Document information


More support for:

IBM Security zSecure Manager for RACF z/VM
zSecure

Software version:

1B1

Reference #:

VM18480

Modified date:

2012-10-31

Translate my page

Machine Translation

Content navigation